A holding statement is a pre-drafted brief announcement you release in the early phase of a crisis, before all facts are available. It confirms that the incident is known and signals that work is underway. Typical elements include a concise situation description, a note about the ongoing investigation, and a time for the next update. In your ISMS, the holding statement belongs in the crisis communication plan. Pre-built templates for various scenarios significantly shorten response time. Avoid speculative statements or premature blame — the holding statement buys time for a thorough analysis.