The role of legal teams as key players in managing
organisational cyber risk is clear, with 76% of respondents
reporting that legal functions are central to incident
response.
Notably, there are two key areas where the importance of the
legal-cyber nexus are best highlighted – the increase in
legal-focussed cyber incident response plans (CIRP) and simulation
participation. These figures clearly illustrate legal expertise is
valued and, in many organisations, viewed as critical to cyber
security risk management, incident response, regulatory compliance
and reputation management.
Jones reflected that one of the key strengths of a general
counsel during a cyber crisis is the ability to manage tension and
stressful situations analytically and objectively, enhancing
clarity and assurance for boards. "They are good at taking the
heat out of situations and focussing on the matter at hand,"
he said.