The Decisions That Matter Before, During, And After A Cyber-attack

Building cyber resilience: introduction

Authorities around the world are paying closer attention to how businesses, their boards, and management teams plan for cyber resilience. Drawing on our work across hundreds of cyber incidents globally, this series examines how multinational organizations prepare, respond, recover, and withstand scrutiny across an increasingly fragmented regulatory landscape.

In brief

• The information needed in a serious incident is often spread across different teams and systems and has rarely had to come together at speed before. Where that work has been done in advance, leaders can make decisions much sooner.
• Once an attack is under way, many of the most consequential recovery choices are about which parts of the business to bring back first. These are commercial judgments. Technology teams provide the picture and carry out the plan, but the call on priorities sits with business leadership.