What I have learned
During a crisis, teams need authority, a shared timeline and a safe way to say 'we do not know yet'. Premature certainty can damage the investigation and the public explanation.
What I would do
I would appoint an incident lead, protect an evidence log, set a decision cadence and bring legal, communications and operations into the same room. Each update should separate facts, assumptions and next checks.