How to Plan Communications Around Cyber Incidents

The video features a panel discussion on communication strategies during cyber incidents. Experts discuss various scenarios like ransomware and third-party breaches, emphasizing preparedness and stakeholder communication. Case studies of EasyJet and Under Armour highlight different approaches to handling breaches and disclosure. The importance of balancing transparency with privacy, reassuring customers, and sharing information within the cybersecurity community is underscored.

What is one of the most common cyber threats companies face today?

• Denial of Service

• Ransomware

• Phishing

• SQL Injection

Why is it important to tailor communication plans to different audiences?

• To ensure consistent messaging

• To save time

• To avoid legal issues

• To reduce costs

What was a key factor in EasyJet's decision to delay public disclosure of their cyber attack?

• Fear of public backlash

• Technical difficulties

• Regulatory requirements

• Lack of evidence

What was a significant challenge for EasyJet during their cyber incident?

• Insufficient data protection measures

• Coordinating with multiple regulators

• Negative media coverage

• Lack of technical expertise

How did Under Armour manage to disclose their data breach so quickly?

• They had prior experience with breaches

• They were under legal obligation

• They had a small user base

• They prioritized transparency and user commitment

What is a crucial aspect of maintaining customer trust after a data breach?

• Offering discounts

• Providing clear and honest communication

• Ignoring the issue

• Blaming external factors

What is a common mistake companies make when trying to reassure stakeholders after a breach?

• Underestimating the breach impact

• Overpromising on data security

• Delaying communication

• Ignoring customer concerns

What role does the Financial Services Information Sharing and Analysis Center play?

• It regulates financial transactions

• It offers insurance against cyber attacks

• It facilitates information sharing among cybersecurity professionals

• It provides financial advice

Why is it important to avoid overpromising during a cyber incident response?

• To avoid legal repercussions

• To reduce workload

• To maintain credibility

• To save resources

What is a benefit of participating in information sharing networks like FS-ISAC?

• Improved customer satisfaction

• Increased profits

• Enhanced cybersecurity awareness

• Reduced operational costs