By Ann Marie van den Hurk, Mind The Gap Advisory
Why synthetic media breaks authority before it breaks truth
There is a moment in some crises that feels different.
It is not the initial alert.
It is not the escalation call.
It is the moment leaders realize they cannot fully trust the evidence in front of them.
A message appears.
A recording surfaces.
A document circulates.
It looks credible. It moves fast. People react.
And suddenly, the leadership challenge changes.
The question is no longer What do we know?
It becomes Can we trust what we are seeing?
When evidence moves faster than verification
Most leadership systems assume a stable relationship between evidence and action.
Verify first. Decide second.
In fast-moving disruptions, that sequence breaks.
Evidence spreads before it can be trusted. External audiences react before internal teams align. Leaders are asked to act while reality itself is unsettled.
This is where authority begins to wobble.
Not because leaders are unprepared or indecisive, but because the organization has never defined what decisions are permissible when certainty is delayed.
The result looks familiar.
Legal asks for confirmation.
Security asks for attribution.
Communications asks for clarity.
Everyone is acting responsibly.
Collectively, the system slows.
Deciding without knowing
At some point, leaders realize they are no longer deciding what is true.
They are deciding how to act without knowing what is true.
That is not a technical challenge.
It is a governance one.
Synthetic media, impersonation, and manipulated content matter in this moment not because they are always convincing, but because they arrive precisely when authority is least stable.
They do not break strong systems.
They expose weak ones.
Why synthetic media is a leadership stress test
Organizations that hold under pressure are not the ones that determine truth the fastest.
They are the ones that have already decided:
Who is authorized to act when verification is incomplete
What actions are allowed before attribution is confirmed
How internal alignment happens before external response
What must wait, and what cannot
Without that clarity, leaders are forced to improvise authority in public.
And improvisation is not leadership.
Readiness before certainty
Leaders who want to pressure-test how their organization holds when evidence itself cannot be trusted often begin by examining whether they have a defined response posture for synthetic media incidents.
That posture is not a statement or a playbook. It is a set of pre-authorized decisions, escalation thresholds, and internal coordination rules designed for moments when verification lags exposure.
Some teams formalize this by maintaining a dedicated synthetic media response layer that can be activated independently, before attribution or authenticity is confirmed.
Ann Marie van den Hurk, MSc., APR is the founder of Mind The Gap Advisory and originator of the CrisisOS5™ Framework. She advises CISOs, General Counsel, Chief Risk Officers, and boards on decision authority and executive crisis readiness for the AI era. Based in Newport, Rhode Island — serving organizations in Providence, Boston, Portsmouth, Portland, and Hartford, and across New England, nationally, and globally. mindthegapcyber.com
.
Frequently Asked Questions
Q. What is a synthetic media attack?
A synthetic media attack involves manipulated or AI-generated content such as deepfake audio, video, images, or impersonation messages that appear authentic and spread rapidly, often before verification is possible.
Q. Why are synthetic media incidents hard for leaders to manage?
They compress time, blur attribution, and destabilize authority. Leaders are forced to act publicly while evidence is still contested, exposing gaps in decision authority and escalation.
Q. Is this primarily a technical or communications problem?
Neither. It is a governance problem. The challenge is not detecting manipulated content, but deciding who is authorized to act, what actions are permissible, and how alignment happens when certainty is delayed.
Q. How should organizations prepare for synthetic media incidents?
Preparation focuses on decision clarity before incidents occur. That includes predefined authority, escalation thresholds, and response options designed specifically for moments when evidence cannot yet be trusted.
Q. When should leadership respond publicly if content may be fake?
That depends on whether the organization has already defined what response is allowed before verification is complete. Without that clarity, delays and conflicting signals are almost guaranteed.
