What is the golden hour of crisis response?

ASIC chair Sarah Court told Senate estimates on 5 June 2026 that ASIC had commenced a formal investigation into KPMG, and Reuters reported that ASIC said it had moved from a preliminary probe to a formal investigation earlier that week

A whistleblower alleged partners misused confidential Lendlease board papers. The papers, it was claimed, helped KPMG secure audit work with Westpac and Dexus.

Finance officials later told parliament they had to chase KPMG multiple times for information the firm should have volunteered.

That detail matters more than the apology that followed. It describes an organisation that let its golden hour pass, in what appeared to be a deliberate cover-up. It then spent months trying to buy it back.

KPMG chairman Martin Sheppard eventually accepted two resignations: chief executive Andrew Yates, and national managing partner Julian McPherson. The firm also apologised, albiet belatedly and under the pressure of media exposure, to the whistleblower, admitting its process had fallen short. Both moves were right. However, they arrived only after a parliamentary hearing forced them into the open.

A crisis PR and communications response built inside the golden hour would have had that acknowledgement ready before officials needed to ask twice. Instead, the sequence ran in reverse: pressure, then admission, then apology. That order damages a leader’s personal standing as much as the company’s.

NSW Treasury demanded written assurance that no KPMG staff linked to the scandal were working on state contracts. Greens senator Barbara Pocock asked why the federal government could not follow the states. Neither intervention was about the original conduct. Both were about whether KPMG could be trusted to say so quickly enough, and voluntarily.

The golden hour is the window immediately after an organisation learns of a serious problem, typically the first sixty to ninety minutes. Speed alone is not the point. An organisation that responds fast with the wrong message has simply created another problem.

Three things need to happen at once inside that window.
1. The facts need to be established and verified.
2. The people who need to know should be briefed before they read it elsewhere.
3. Someone needs to be named as the one who speaks for the organisation.

This is where clear, concise, consistent communication, the 3Cs, earns its keep.

Boards often mistake the golden hour for waiting until they are certain. Yet certainty rarely arrives within sixty minutes, and audiences do not expect it. What they expect is visible engagement rather than silence.

Andrew Yates’s resignation makes the point plainly. CEO reputation management in Australia now depends on how quickly a leader is seen to act once a problem surfaces, not just on how the company eventually responds.

Crisis communication works best as three distinct messages, delivered together rather than released one at a time. The incident message states the facts and the timeline as currently understood. The company message sets out the organisation’s values and its commitment to fixing what went wrong. The personal message is the leader’s own account of how they feel about it, and what they intend to do personally.

KPMG’s apology eventually carried elements of all three. However, the hostile Senate hearing forced the company message and the personal accountability. The result read as reactive, under pressure, and neither genuine or considered.

A prepared organisation delivers all three inside the golden hour, before a regulator extracts them one by one.

None of this works from instinct alone. Organisations that move well in the golden hour have usually done the unglamorous work beforehand. They identify likely risks, test response protocols, and know who briefs whom before a crisis begins, not during one.

It builds trust, with staff, the regulators, clients, the public.

That groundwork sits closer to issues management than to crisis response itself. Most crises, after all, were visible as issues long before they became public. Whistleblower complaints, in particular, rarely surprise the organisations that receive them. Instead, they test whether the golden hour instinct is already built into the culture.

Senior counsel also needs to be in place before the event, not summoned once it breaks. A retained relationship, of the kind built through Wilkinson Confidante, means the adviser in the room already understands the business and the risk. There is no onboarding delay when the phone rings at eleven at night.

Trust, once tested or trashed publicly, does not recover through better wording. It recovers through truth, transparency and traceability, the evidence trail an organisation can be checked against its own record. That discipline needs to exist before the first sixty minutes start, not be assembled during them.

A veteran newsroom producer would have asked two questions of KPMG’s board long before June: who signed off the first statement, and why? That instinct, spotting the story a company is failing to control before the market does, comes from decades of newsroom judgment, not from a media plan written after the fact.

Governance failures like KPMG’s are rarely a communications problem in the first instance. They become one the moment the golden hour is missed, and the organisation is left explaining itself on someone else’s timeline. Handled well, a crisis stays a single story. Handled late, the response becomes the second, more damaging one, and it always arrives on the worst possible day.