Why effective cyber response goes beyond just system preparedness
Over recent weeks we’ve explored the evolving issues shaping today’s cyber threat landscape. From compliance and resilience, to the growing influence of AI, supply chain vulnerabilities and incident recovery. The common theme that emerged throughout those discussions is that cyber resilience is about far more than technology.
As discussed during our roundtable event, organisations can have robust plans, documented processes and well-established technical controls in place, but still struggle when faced with the realities of a live incident. Systems may be unavailable, information incomplete and decisions required at speed. In those moments, communication becomes a critical component.
Recent high-profile cyber incidents have also highlighted how quickly operational disruption can extend beyond technical recovery alone. Communication with employees, customers, suppliers and stakeholders becomes essential when systems are unavailable and decisions need to be made under pressure.
Delays in communication can affect decision-making, increase uncertainty, undermine stakeholder confidence and ultimately influence the effectiveness of an organisation’s response and recovery.
This challenge is at the heart of a new research project we’re undertaking in collaboration with Imperial College London and IESEG School of Management. The research aims to better understand the impact of delayed communication during cyber incidents and explore how communication, leadership, coordination and decision-making contribute to organisational resilience and recovery.
“The research will capture the experiences of professionals who have managed, responded to or supported organisations through cyber incidents.
By understanding how communication, coordination and decision-making unfold during a cyber crisis, we hope to build a richer understanding of the factors that influence effective response and recovery, and the lessons that can strengthen future resilience.”Rajesh Bhargave, Imperial College London
As part of the project, we’re inviting cyber security professionals, organisational leaders and individuals who have experience managing or responding to cyber incidents to take part in a survey that will help inform the research findings. The results will contribute to a wider insight examining how organisations prepare for, respond to and recover from cyber incidents, helping to build a stronger understanding of the factors that shape effective cyber resilience.
If you have experience managing cyber incidents and would like to contribute to the research:
