A Playbook for Effective Corporate Communication After a Cyber Security Incident
summary
Presents a validated playbook that combines academic evidence and real incident reviews into an actionable framework: use prepared statement templates, map notification obligations by jurisdiction, and run regular communication rehearsals. Validated through interviews with 13 senior responders and practice-based analysis of breaches like Equifax and TalkTalk. Recommends notify sooner rather than later, accept responsibility rather than blame attackers, offer concrete remediation (credit monitoring, MFA) and choose direct channels when possible.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 0:55Quote
- 5:22Themes
- 10:40Key Findings
- 15:20Best Practices
- 16:13Framework
- 17:53Whistlestop
- 18:12Disclosure
- 18:30Framing the Message
- 19:25Preparing for Reaction
- 19:39Conclusion
related talks
51mSurvive the Breach-Protecting People & the Company When the Worst Happens
51mLife after the Breach: A Survivor's Guide
12mAll Hands on Deck – Handling Security Issues
32mHow to Orchestrate a Cyber Security Incident Tabletop Exercise
54mSOCcing: Responding to a Cyber Incident
01h 01mOpening The Playbook; What to do when you've been hacked
51mDo Better: Board-Level Accountability in Cybersecurity
30mRound Table | Cyber Resilience: Prepare, Test and Survive