1. Purpose
This policy establishes Murzo Group’s approach to managing communications and decision-making during incidents that may pose legal, operational, reputational, or security risk.
The objectives are to protect Murzo Group’s legal position, ensure accurate and lawful communications, prevent unauthorised disclosures or admissions, coordinate response across the business, and maintain trust while avoiding speculation or misinformation.
2. Scope
This policy applies to all Murzo Group operations, platforms, and services, and to all employees, contractors, directors, and representatives.
It applies regardless of incident cause or location.
3. Definition of a Crisis or Incident
A crisis or incident may include, but is not limited to:
- Cybersecurity incidents or data breaches
- Ransomware or malicious attacks
- Physical security incidents
- Allegations of misconduct or wrongdoing
- Regulatory investigations or enforcement action
- Legal disputes or litigation
- Serious service disruptions
- Reputational or media-driven events
- Environmental, safety, or ethical concerns
Murzo Group reserves discretion to classify any event as a crisis.
4. Incident Response Principles
- Control: Communications are tightly managed
- Accuracy: Information is verified before disclosure
- Lawfulness: All actions comply with legal obligations
- Proportionality: Response matches incident severity
- Confidentiality: Sensitive information is protected
- Non-Admission: No admission of fault unless legally required
5. Authority & Spokespersons
Only authorised Murzo Group representatives may communicate externally during a crisis.
Unless expressly authorised, no employee or contractor may speak to media, issue public statements, post commentary on social media, or share information with third parties.
Unauthorised communication may result in disciplinary or legal action.
6. Internal Escalation & Reporting
All suspected incidents must be reported immediately through appropriate internal channels.
Murzo Group will assess severity, determine response requirements, and decide whether legal or regulatory notification is required.
Failure to report incidents promptly is not tolerated.
7. External Communications
Where communication is required, Murzo Group may engage with clients, regulators, insurers, legal advisers, or the media.
All communications are centrally coordinated, legally reviewed where appropriate, and limited to factual and necessary information.
Murzo Group is under no obligation to comment publicly unless required by law.
8. Legal & Regulatory Notifications
Where notification obligations arise, Murzo Group will assess requirements promptly and make disclosures within lawful timeframes.
Disclosures are limited strictly to what is legally required.
9. Preservation of Evidence
Murzo Group may preserve records, logs, and communications, suspend routine deletion, and apply legal holds.
Tampering with or destroying evidence is strictly prohibited.
10. Confidentiality & Privilege
Murzo Group may engage legal, security, or forensic advisers.
Certain communications may be protected by legal privilege or confidentiality obligations and must not be disclosed.
11. Social Media & Public Commentary
During incidents, employees and contractors must not comment publicly, speculate, or engage in online discussion referencing Murzo Group, even in a personal capacity.
12. Post-Incident Review
Following resolution, Murzo Group may conduct internal reviews to identify lessons learned and improve controls.
Reviews are not published unless required.
13. Non-Retaliation
Murzo Group supports good-faith reporting of incidents or concerns.
Retaliation against individuals raising genuine issues is not tolerated.
14. Limitations
This policy does not guarantee prevention of incidents, require public statements, or create contractual obligations.
Murzo Group retains discretion in response and communication strategy.
15. Review & Updates
This policy is reviewed periodically and updated to reflect legal developments, operational changes, and lessons learned.
Updated versions will be published on Murzo Group platforms.
