Crisis Management - what could go wrong?
|
Abstract
Crisis management, crisis simulation, crisis response. These terms are currently being banded around somewhat interchangeably. There is a constant undercurrent of cyber incident related anxiety, for obvious reasons. Very few have visibility of what actually happens when a cyber crisis occurs, let alone how they should prepare themselves. Perhaps they have a run an annual mandatory IT team tabletop exercise for the IT team, or compulsory incident training. Conversely, Crisis Management simulations are hugely in demand from enterprise clients, but after initial conversations it becomes clear that this exercise may be to appease the board and tick a box, as opposed to truly exposing an organisation to the wide-scale chaos of a cyber crisis causing wide spread business impact. Very few clients know what a Crisis Management simulation might entail, let alone what they should be looking to achieve. There are some basic principles that will help an organisation be more resilient to this type of incident, and practical insights that can be shared from those who have seen it, warts and all. Speaker Bio: Ellie’s Psychology degree, gained in her home country of England, was an unlikely springboard into a career in cyber security. Despite no traditional technical background, a deep-rooted interest into the weird and wonderful aspects of human behaviour navigated her into her first cyber role in social engineering simulation, training, and awareness. This led to delivering complex security behaviour uplift programs to enterprise organisations across the globe. Particular professional highlights include a personal record of one million simulated phishing emails sent to one client in a year, and running round a bank in South Africa scattering USB sticks, aiming to see who would plug it in and click the totally legitimate looking file labeled ‘EMPLOYEE PERSONAL BONUSES’. Since then, one move across the pond later, Ellie has worked in the MxDR space in Australia delivering capability and service uplift for clients across the Asia Pacific region. Most recently, Ellie is now truly gaining an insight into the width and breadth of human behaviour, leading client delivery in APAC for cyber incident response, crisis management, and cyber incident readiness and preparedness services at Accenture. |