Helping Crisis and Incident Management Teams Respond to Cyber Threats

DEALING WITH CYBER THREATS

Confronting the impacts of cyber threats

Incident and Crisis Management teams are being challenged in a myriad of ways to respond to the impacts of cyber threats.

For organisations who have built their resilience capability to respond to ‘all-risks’ many of the frameworks, tools and capabilities can also be used for cyber threats.

Organisations yet to build an ‘all risk’ approach to becoming resilient can draw upon ‘better practice’ thinking used by organisations from high-risk industries, which involves the following steps:

Review your cyber security response team capability as part of your broader incident and response plan and against better practice organisational resilience. Identify gaps that may exist or areas of excellence that can be applied to cyber risks.
Understand and meet the changing needs of your industry’s regulators.
Design and develop Incident and Crisis Management scenario planning activities to include all layers of the organisation including the executive and the board to uncover areas of concern or build assurance.
Identify a Critical Thinking Framework that can be used across all response teams within your organisation to ensure a coordinated response and to provide assurance to key stakeholders.
Facilitate discussions on complex board and executive level decisions regarding cyber security attacks, such as paying a ransom and document the decisions using the Critical Thinking Framework.
Endorse a Critical Thinking Capability Uplift Program for high priority teams initially and then across the enterprise to ensure teams have the skills to prevent, detect, manage, and recover from on-going cyber security risks.

To learn more about our capability uplift programs, visit:
Crisis Management Capability Development
Enabling Team-Based Critical Thinking