Chapter 4
Strategic and Financial Vulnerabilities in the Digital Age
The Islamic State's sophisticated social media strategy demonstrates how organizations can leverage digital platforms for strategic aims. Their "Dawn of Glad Tidings" app automatically posts content through users' accounts, carefully timed to avoid Twitter's spam detection. With dedicated media production units creating everything from photos and videos to English-language magazines, IS strategically uses social media to galvanize youth support, drive recruitment, and project a specific organizational image.
While social media disrupts from the bottom up, effective response requires top-down leadership. CEOs and boards bear ultimate responsibility for protecting organizational reputation, yet board members often lack detailed understanding of social media risks. Despite being less likely to use platforms like Facebook, leadership must ensure proper risk management as they remain accountable for company strategy and reputation protection.
Social technologies have evolved beyond marketing and PR to encompass sales, customer service, HR, recruitment, internal communications, and product development. McKinsey research shows broader adoption correlates with greater benefits, potentially unlocking $900 billion to $1.3 trillion through improved communication and collaboration. However, organizations that are hierarchical, siloed and risk-averse struggle with the openness and speed required.
Many organizations underestimate social media's reputational aspects, treating it primarily as a marketing tool rather than a long-term reputation management asset. This oversight persists despite reputation risk consistently ranking among top corporate concerns-a 2014 Clifford Chance/EIU study found 57% of board members worry more about reputational damage than financial impacts.
Donald Rumsfeld's famous "known knowns, known unknowns, and unknown unknowns" framework applies perfectly to social media risks. Known knowns include established competitors using social media distinctively or tracked online discussions about your company. Known unknowns represent recognized gaps in knowledge-like potential smear campaigns or activist attacks whose form remains unclear. Unknown unknowns are completely unforeseen threats with major impact, like disruptive new market entrants or unprecedented collaborative attacks between seemingly unrelated parties.
Social media has democratized the ability to damage reputations through smears. In 2013, an anonymous video showing moldy jelly being prepared at Hoi Tin Tong, a Hong Kong herbal medicine retailer, went viral. Though the company quickly accused a competitor of fabricating the video, sales plummeted. In another case, journalist Chen Yongzhou confessed to being paid 8,000 USD to write 15 negative articles about construction equipment manufacturer Zoomlion, causing a 9% share price drop in what appeared to be a plot by competitor Sany Group.
Chapter 5
The Rise of Digital Activism and Corporate Vulnerability
The intersection of societal issues and social media has made companies more vulnerable, as shown by the Bank of America case where customer backlash against a $5 monthly debit card fee led to 600,000 people transferring $4.5 billion to community credit unions. This vulnerability stems from four key factors: activism becoming mainstream, activist organizations transforming into diffuse networks, less predictable lines of attack, and activists' increased ability to damage institutional reputation.
Once marginal, NGOs have become numerous and widely accepted, with an estimated 1.5 million in the US and 2 million in India. Major organizations like Amnesty International and Greenpeace have expanded internationally, wielding significant "soft power" and enjoying higher public trust than businesses, media, or governments. Social media has transformed their reach, allowing direct communication with the public who can "vote immediately with their wallets," as former WWF Singapore Communications Director Sourav Roy noted.
Online petitions have become a mainstream form of activism covering everything from environmental protection to tax avoidance and local services. Change.org, "the world's platform for change," boasts 77 million members in 196 countries (62% women) with 700 petitions started daily. These platforms have democratized activism, transforming it from an activity once limited to students and political dissidents into an accessible tool for suburban housewives and office workers worldwide.
Companies once knew which groups opposed them and what tactics to expect. Now, with countless pressure groups worldwide and individuals able to start petitions instantly, it's harder to identify threats. Campaigns often emerge from unexpected sources, as when Bank of America faced greater damage from two individual customers than from the Occupy Wall Street movement.
Activists now target beloved products rather than just corporate entities, recognizing consumers' deeper emotional connections with brands than with parent companies. Greenpeace's "KitKat Killer" campaign against Nestle exemplifies this sophisticated approach - a slick video showing an office worker biting into a chocolate finger that spurts blood, highlighting palm oil's role in deforestation. The campaign generated 1.5 million views and 200,000 emails to Nestle, ultimately forcing the company to commit to "zero deforestation" by 2015.
Companies increasingly engage with social causes but face significant risks when doing so. As society becomes more polarized and social media amplifies tribalism, even well-intentioned social engagement can backfire. Chili's Bar & Grill faced massive backlash after promising to donate 10% of sales to the National Autism Association because many customers objected to the organization's stance against vaccinations.
Chapter 6
When Employees and Legal Issues Threaten Your Digital Presence
In today's transparent, networked world, unethical behavior spreads faster than ever. A Freshfields Bruckhaus Deringer study found that crises from behavioral issues spread online more rapidly than any other type. Social media not only amplifies traditional behavioral problems but creates new risks around how organizations conduct themselves on platforms like Facebook.
Social media has blurred the line between professional and personal lives, creating reputation risks when employees behave inappropriately online. PayPal's Director of Global Strategy Rakesh Agarwal was fired after publicly insulting colleagues on Twitter. Restaurant owners at Amy's Baking Company called their Facebook fans "REDSHITTORS," "Pussies," and "Disgusting Pig People" after being humiliated on Kitchen Nightmares. Even supposedly private networks pose threats - most personal networks contain loose connections like colleagues who can share inappropriate content.
Disgruntled employees have become increasingly strategic in damaging employers' reputations. Greg Smith's New York Times resignation from Goldman Sachs forced CEO Lloyd Blankfein to publicly defend the company's culture. Today's employees don't need mainstream media - they can use anonymous review sites like Glassdoor, create fake accounts to leak information, or openly challenge employers.
Marketing that appears offensive or opportunistic inevitably triggers backlash, as seen with Kenneth Cole's controversial tweets about the Egyptian revolution and Syrian conflict. Even well-intentioned campaigns can backfire, like ING Direct's ad that unintentionally appeared disrespectful to people with mental health issues. Unethical marketing practices flourish online through astroturfing (creating fake grassroots support), sock puppetry (using fake identities to promote products or attack competitors), and censorship (deleting negative comments). Research shows 62% of consumers distrust companies' online marketing, with 47% saying they would boycott brands caught manipulating reviews.
The social web has complicated intellectual property management through brand name squatting, cybersquatting, and typosquatting - where individuals claim company names on platforms or create deceptive websites. Digital content is easily downloaded and shared despite protection efforts. IP infringements damage reputation particularly when companies themselves misuse others' content, as when DKNY used Humans of New York photographer Brandon Stanton's images after he declined their offer.
Defamation has exploded in the social media era, with research showing a 23% jump in UK defamation actions in 2014. According to Chris Anderson of Cyber Investigation Services, most online attacks come from aggrieved former employees, competitors, spouses, and lovers targeting high-profile individuals and businesses. Sophisticated attackers publish anonymous false reviews on sites like Rip-Off Report and Reddit, often using public computers to hide their identity.
Chapter 7
Operational Weaknesses That Invite Digital Disasters
The majority of social media meltdowns stem not from external attacks but from everyday operational issues like poor customer service, inadequately managed social profiles, and flawed marketing programs - most of which can be fixed.
Customer service now plays a crucial front-line role in shaping reputation, with complaints that once remained private now instantly public. People expect immediate responses on social platforms, and the longer companies take, the more incompetent or uncaring they appear. Customers have become increasingly sophisticated at escalating complaints - from posting on company profiles to Twitter (where journalists might notice) to more dramatic measures. Hasan Syed bought Twitter ads to pressure British Airways about lost luggage, while in China, Luo Yonghao publicly smashed Siemens refrigerators after complaints about faulty doors went unaddressed.
Social media marketing offers tremendous opportunities but poses significant risks when handled inappropriately. Programs must be relevant and value-adding rather than intrusive or promotional. Campaigns should avoid opening organizations to public criticism, as happened when J.P. Morgan's #AskJPM Q&A backfired spectacularly, providing a platform for people to vent frustrations about the bank's role in the financial crisis.
While automation tools offer tempting efficiency for managing the demanding, 24/7 nature of social media, they often create problems. Autoreply bots misinterpret information or reply to wrong users, scheduled tweets may post during unexpected disasters making companies appear insensitive, and automated campaigns can go disastrously wrong. Coca-Cola had to withdraw its #makeithappy Superbowl campaign when Gawker created a bot that tricked Coke's system into transforming passages from Hitler's Mein Kampf into cute ASCII art images.
With virtually all corporate information now digital and easily shared, security threats have multiplied. Disgruntled employees can upload confidential information to WikiLeaks or sharing sites like PasteBin, while external hackers exploit weaknesses in corporate IT defenses. Today's hackers are no longer teenage pranksters but anonymous professionals who steal and sell passwords, contact information, and credit card details to the highest bidder.
Organizations have expanded their social media presence across multiple platforms to better understand and reach stakeholders. However, this rush has created hundreds of official and unofficial profiles managed by various employees and partners that are costly to maintain and often inconsistent in branding and messaging. This sprawling infrastructure not only suggests organizational carelessness but also increases vulnerability to complaints, legal threats (especially in regulated industries), and security breaches.
Chapter 8
Responding Effectively to Online Reputation Threats
Despite preparation, companies inevitably face incidents ranging from product failures to mishandled complaints. While responding on social media shares similarities with traditional media responses-requiring alertness, honesty, and measured communication-the social web introduces unique challenges. You're often dealing with unknown individuals in public conversations with unpredictable outcomes. With users expecting responses within minutes rather than hours, speed is essential, yet overreacting can make situations worse.
When evaluating social media threats, focus on four key metrics: visibility (mention frequency and channel prominence), virality (sharing potential based on format and who's engaging), sentiment (how negatively the issue is viewed), and influence (the complainant's following and credibility). Modern listening tools can track these metrics and set automated alerts at different severity thresholds.
When facing online threats, organizations have five main response options. First, communicate through acknowledgment or a full statement, being open and honest. Second, negotiate by offering refunds or taking discussions offline. Third, leave the situation alone when engagement might worsen matters. Fourth, minimize visibility by publishing new content, though this risks accusations of burying bad news. Fifth, remove content through platform reporting tools or legal action when facing false allegations.
When responding to social media incidents, applying a light touch is crucial. Your tone should be professional, helpful, and humble-this increases the likelihood people will give you the benefit of the doubt or even defend you. Moving quickly to accept responsibility and demonstrating genuine efforts to resolve issues shows you're acting in customers' interests rather than merely protecting your reputation.
Organizations frequently face five common social media threats: The Furious Customer who vents frustration online; The Rogue Employee who embarrasses the company through inappropriate posts; The Committed Activist highlighting environmental or social concerns; The Hostile Journalist publishing inaccurate or unfair coverage; and The Backfiring Campaign where marketing efforts go astray.
When handling customer complaints in social media, organizations must balance speed with accuracy. While customers expect acknowledgment within hours, getting facts straight is essential-nothing irritates frustrated customers more than speculation or inaccuracies. A brief initial acknowledgment can buy time while investigating. Organizations should "do the right thing" rather than appearing preoccupied with reputation management. FedEx demonstrated this by replacing a damaged monitor and meeting the customer face-to-face after a viral video showed their delivery person throwing the package over a fence.
Chapter 9
Navigating Major Crises in the Digital Age
Today's crisis landscape has evolved dramatically with social media. While traditional "smoldering" issues like governance failures still exist, there's been an increase in short-lived but intense problems stemming from customer service issues, employee behavior, and marketing missteps. The social web has transformed how crises unfold: news travels faster and further; transparency is expected immediately; digital evidence makes concealing facts nearly impossible; and rumors spread rapidly through interconnected networks.
Organizations must develop comprehensive social media crisis plans that address employee communications, online influencer management, and dialogue protocols. Employees are crucial ambassadors during crises and need clear guidance on external communications. The plan should establish detailed protocols for online dialogue including response approvals, responder identification, conversation monitoring, content archiving requirements, and violation management.
When Malaysia Airlines flight MH370 vanished in March 2014, the company's crisis response demonstrated both strengths and weaknesses in social media crisis management. Despite the unprecedented nature of the situation, MAS utilized Twitter, Facebook, and Google+ for updates, launched an emergency website with news releases and passenger information, and suspended digital marketing. However, their initial response was slow-taking nearly five hours after losing contact to confirm the plane was missing on social media, allowing speculation to flourish online. They improved their approach when MH17 disappeared over Ukraine months later, confirming the loss on Twitter before issuing an official statement.
The content of crisis communications is as crucial as speed, particularly in the first hour. When facts remain unclear, effective responses acknowledge the situation, express concern for those affected, and commit to thorough investigation-all delivered in a tone appropriate to the channel. Social media demands conversational, jargon-free language rather than corporate speak.
In crisis communications, how you tell your story is as important as what you say. Images become powerfully associated with crises-an oil-covered pelican for BP's Gulf spill, the second plane hitting the World Trade Center, or Goldman Sachs' CEO testifying during the financial crisis. Organizations must carefully consider how their story will be discovered and experienced online.
Online listening during crises enables organizations to identify and track rumors, which have become more numerous and damaging in the social media era. When handling online misinformation during a crisis, respond quickly and unambiguously to untrue rumors from credible sources, supporting your case with visual evidence. For partially true rumors, intervention often gives more credence to the harmful parts, though responding to clear misunderstandings can demonstrate responsibility. For true rumors substantiated by evidence, confirm the truth quickly to appear honest.
Chapter 10
Building a Resilient Digital Reputation for the Long Term
Even after the initial chaos of a crisis subsides, organizations must address root causes, ensure problems don't recur, and rebuild fractured stakeholder relationships. Social media provides powerful tools for direct communication with audiences to apologize, share your perspective, and demonstrate your recovery efforts.
Online video apologies can be powerful but risky. Lululemon founder Chip Wilson's YouTube apology for comments about women's bodies backfired dramatically - despite acknowledging the problem and taking responsibility, his delivery came across as emotional, confused, and half-hearted. By contrast, JetBlue CEO David Neeleman's video after the 2007 Valentine's Day storm crisis succeeded because he appeared natural, sincere, and focused on solutions rather than excuses.
Rebuilding after a crisis requires more than just apologizing - it demands sustained effort to restore trust and repair damaged relationships. General Motors demonstrated this after emerging from Chapter 11 bankruptcy by focusing on adding value rather than overtly protecting its reputation. Rather than aggressive advertising, GM invited 100 journalists and 100 regular people (including supporters, skeptics, and cynics) to a special event giving equal access to products and leadership.
Search engines play a crucial role in crisis recovery as people's information-seeking behavior evolves from passive reception to active searching. Companies must work to improve their search presence by thinking laterally about broader impact areas, focusing on visual content that can replace harmful imagery, leveraging high-authority channels, distributing content widely across ranked platforms, and creating dedicated crisis hubs with their own URLs.
Organizations must systematically identify and evaluate online threats as part of comprehensive business risk assessments, involving multiple departments from audit to marketing. Whether conducting standalone social media risk assessments or integrating them into broader reviews, firms should use various tools from interviews to social listening to scenario planning.
Companies should take a preventive approach to online reputation management, similar to Traditional Chinese Medicine's focus on maintaining health rather than treating illness. This includes strengthening IT systems, ensuring legal compliance, developing clear social media protocols for employees, and implementing monitoring systems to track threats and route issues to appropriate teams.
While openness is often considered "the price of entry" to social media, transparency isn't absolute and varies by context and culture. Organizations should develop their own transparency policies covering who represents them online, prepare holding statements for identified threats, and balance compliance requirements with proactive openness.
Despite the hype around social media, it's not a cure-all solution. No amount of social media wizardry can transform mediocre products into viral sensations, nor can it fix fundamental character flaws or organizational weaknesses-in fact, it will likely amplify them through public discussion. Focus on fixing the actual problems while ensuring ethical business practices and strong stakeholder relationships. Face-to-face interaction remains the best way to truly understand stakeholders and resolve problems effectively.
