A circulated clip may be manipulated or may show a genuine statement. Prepare an initial response to a suspected deepfake or disinformation incident, separating established facts from open questions.
In the course case, the full event recording confirms a statement in one clip; a second excerpt remains unchecked. Compare the clip with the full recording and other sources, assess its public impact and draft an initial factual statement. Specify recipients, approval and the next review time for any later correction.
Take away an initial response package with a statement and verification checklist, so your team can continue checking and communicating as new information arrives.
A small source and handover aid is planned as a course companion. It connects reports with their origin, open questions and follow-up assignments. You can update your worked case record as new information arrives.
What you will work on
You classify a report of a potentially manipulated statement by source, reach, affected parties and time pressure, and document which lines of enquiry support, weaken or leave the suspicion open.
You define decision rights, approval limits and escalation thresholds for a defined case, and justify them to communications, leadership, security and legal functions.
You revise the initial statement after evidence weakens the suspicion.
Who it is for
Heads of corporate communications
Leaders responsible for crisis management
Security and risk managers
Topics
Early detection and triage of manipulated media: report, reach, affected parties and time pressure
Verification without claiming forensic certainty: sources, metadata indicators, internal confirmation and limits of evidence
Decision rights and escalation across communications, leadership, security and legal
Crisis communication under uncertainty: confirmed and unconfirmed statements, correction and learning
Disinformation as a campaign: actors, narratives, recurrence risk and monitoring
Checking sources in the case, revising the statement when new information arrives and trying the checklist at work
Your result
Your initial response package contains a worked statement and verification checklist. It helps the team track sources, unresolved authenticity questions and the route for a later correction.
Prerequisites
Experience in communications, leadership or security, and access to an area of responsibility or reliable assumptions about responsibilities, channels and approval routes in your own organisation. Where confidential information is unavailable, an example case is used.
Format and approach
Planned self-study course with an assumed workload of 4–5 hours, short case prompts, a template to complete and self-checks.
When an incident becomes public, communication and leadership need coordinated statements. Decide whom to inform and who approves the message, then draft an initial statement with confirmed information, open questions and a time for the next update.
When a client faces a crisis, a communications agency needs to know what it will do and who makes decisions. Develop a mandate template covering approvals and handovers, then test the arrangements in a time-sensitive case. Use it to prepare a discussion with client management and specialists.
Disconnecting an affected system immediately can limit the spread of a cyber incident, but it also interrupts a critical service. In this course, you decide how to proceed during the first 120 minutes: define the escalation route, prepare a situation picture and issue initial instructions.