Incident response is not just technical – how to red team your communications

Chances are you’ve written a comprehensive cybersecurity strategy that covers all the major risk scenarios you think you’ll face. You’ve invested resources in testing your defensive tools and have detailed playbooks to cover all those scenarios.

But have you red teamed your communications plan? Who will be your spokesperson? Are they ready? Do you know who you’ll communicate with and how and when? Do you know which regulators need to be notified and the timelines?

And while managing a major security incident is complex and intense for CISOs and technical teams, having the media breathing down your neck while the CEO and board want instant updates can make everything feel a hundred times worse.

In this presentation, long-time infosec reporter and co-CEO of Media-Wize Anthony Caruana and award-winning PR and Co-CEO of Media-Wize, Kathryn Goater discussed the world of crisis communications during a cybersecurity incident.