As a Senior Crisis Consultant in the cybersecurity industry, I see a shift in how organizations prepare themselves for a potential cyber crisis. Traditional risk assessment methods are no longer sufficient. They often result in measures only being taken for the most likely incidents.
However, it is usually events considered unlikely that cause the greatest impact, for which organizations are not prepared. Regulators recognize this, so here is my wake up call: prepare for the WORST…
I see two big challenges organizations face:
Determining what the worst case scenario could be and to what extent you should prepare.
Linking the technical, operational and tactical response to strategic crisis management.
Let’s look at how you can start to tackle these challenges.