1. ISO 22301:2019, Security and resilience — Business continuity management systems — Requirements.
Clause 4.2, "Understanding the needs and expectations of interested parties": This clause requires the organization to identify interested parties (which include the media) and their requirements. The need to maintain a positive reputation is a key expectation.
Clause 8.4.3, "Warning and communication": This section mandates the establishment of procedures for communicating with interested parties, including the media, during a disruptive incident to manage consequences effectively.
2. ISO 22313:2020, Security and resilience — Business continuity management systems — Guidance on the use of ISO 22301.
Section 8.4.3.1, "General": This guidance document elaborates on communication, stating that "Communication during an incident is undertaken to... manage the consequences with any interested parties and maintain confidence in the organization." This directly acknowledges the need to manage perceptions, which are heavily influenced by the media.
3. Coombs, W. T. (2014). Ongoing Crisis Communication: Planning, Managing, and Responding (4th ed.). SAGE Publications.
Chapter 2, "Crisis Management: A Process for Strategic Management of Crises": This university-level textbook explains that a crisis poses a reputational threat. It states, "Reputations are an intangible asset, but an asset that has significant value... The actions of the media can have a profound impact on the long-term performance... of an organization." (Paraphrased from concepts throughout the chapter). This source directly links media actions to long-term performance as a core tenet of crisis management.