Cyber Mayday and the Day After : A Leader's Guide to Preparing, Managing, and Recovering From Inevitable Business Disruptions

**Successfully lead your company through the worst crises with this first-hand look at emergency leadership** Cyber security failures made for splashy headlines in recent years, giving us some of the most spectacular stories of the year. From the Solar Winds hack to the Colonial Pipeline ransomware event, these incidents highlighted the centrality of competent crisis leadership. __Cyber Mayday and the Day After__ offers readers a roadmap to leading organizations through dramatic emergencies by mining the wisdom of C-level executives from around the globe. It’s loaded with interviews with managers and leaders who've been through the crucible and survived to tell the tale. From former FBI agents to Chief Information Security Officers, these leaders led their companies and agencies through the worst of times and share their hands-on wisdom. In this book, you’ll find out: * What leaders wish they'd known before an emergency and how they've created a crisis game plan for future situations * How executive-level media responses can maintain – or shatter – consumer and public trust in your firm * How to use communication, coordination, teamwork, and partnerships with vendors and law enforcement to implement your crisis response __Cyber Mayday and the Day After__ is a must-read experience that offers managers, executives, and other current or aspiring leaders a first-hand look at how to lead others through rapidly evolving crises. Cover Title Page Copyright Page Contents Introduction: Setting the Global Stage for Cyber Resilience A New Sense of Cyber Urgency A Peek Behind the Curtains, and the Making of Cyber Mayday and the Day After The Three-Part Breakdown Part I A Leader’s Guide to Preparing for the Inevitable Chapter 1 If I Had a Time Machine Starting with the Unknowns – Or Not? An Isolated Perspective Has Many Limits Learning from Our Past to Lead Our Future Frequent Ransomware Attacks Prompt Response Capability Enhancements in New York State Like a Bad Penny Education Sector Targeted by Cybercriminals The Battle Continues Five Takeaways Chapter 2 Fail to Plan or Plan to Fail: Cyber Disruption Response Plans and Cyber Insurance The Making of the Michigan Cyber Initiative Confronting Cyber Emergencies: The Michigan Cyber Disruption Response Plan U.S. Federal Government Guidance on Security Incident Handling Positive Security and Risk Management for International Organizations Changes in the Planning Approach Post-Incident The Wisconsin Government Approach to Cybersecurity Incident Response A Private Sector Perspective on Computer Security Incident Response Incident Response and Cyber Insurance Chapter 3 Practice Makes Perfect: Exercises, Cyber Ranges, and BCPs The Importance of Cyber Exercises History of Cyber Storm Exercises Michigan Participation in Cyber Storm I Cyber Scenarios, Exercise Plans, and Playbooks Help Available, from a Cyber Range Near You Internal Business Continuity Planning (BCP) Players Designing Your BCP in Accordance with Your Company’s Mission Where Next with Your BCP? How Often Should We Be Running Our BCPs? Automated Responses to Incidents Chapter 4 What a Leader Needs to Do at the Top Building Relationships with Your Business Leaders Speak Their Language Laying the Groundwork Security Variance The Fundamentals and Top Mitigation Strategies Security Needs to Have a Business Purpose Fighting the Innate Nature of a CISO How Should a Senior Executive Approach Cyber Issues? What Can the Board Change? Story-Based Leadership Setting a Supportive Culture Leads to Creative Solutions Part II Cyber Mayday: When the Alarm Goes Off Chapter 5 Where Were You When the Sirens Went Off? The Story of Toll Fine-Tune Your BCP Cyber Crisis in Pandemic Times Microscopic Lessons – Day One of the Incident The Recovery Improvement with Hindsight Third-Party Risks and Cyber Insurance Effective Leadership in Times of Crisis A Supportive Management Helps Bring Results Chapter 6 Where Do We Go When the Power Goes Off? Assessing the Situation Establishing Order Cyber Teamwork During a Blackout Stepping Back to Step Forward People, Process, and Technology in Cyber Emergencies CISO Mindset Regarding Security Incidents Defining Security Operations? Measuring Results: Key Performance Indicators Information Sharing Strengthening Playbooks Multi-State Security Operations5 Chapter 7 Teamwork in the Midst of the Fire A Big Step Back – and Analyzing What Went Right and Wrong with the JCTF Processes A Private Sector Incident with a (Somewhat) Happy Ending Great Leaders Foster Teamwork – But How? Seven Tips to Improve Teamwork Chapter 8 What Went Right? Swiftness Matters Proactive Leadership and Transparency as Key Factors Aviation Industry Lessons from a Crisis Communications Researcher Communicating Cyber Crisis with CONSOLE Meet the World’s First CISO The Basic Keys of Disaster Response The Problem with Misinformation The Stockwell Tube Incident Part III The Day After: Recovering from Cyber Emergencies Chapter 9 The Road to Recovery Cyber Mindsets from a War Zone Hindrances to Avoid Asymmetric Hybrid Warfare (AHW) The Road to No Recovery The First Step in Communication The Four Steps of a Crisis-Ready Formula Key Actions for Recovery Chapter 10 What Went Wrong – How Did We Miss It? Mistakes and Solutions in Wisconsin Hospital Ransomware – and Learning from Mistakes How Overconfidence Can Impact Organizational Security and Cause Data Breaches Reflecting on Incidents with a Mentor Chapter 11 Turning Cyber Incident Lemons into Organizational Lemonade Are We Learning from These True Stories? Calls for More Resilience and Doing Much Better More Lessons Learned Back to the Beginning: A Circular Approach to Incident Response During Cyber Emergencies A Helpful Hospital Example Making Lemonade Five Lessons from the Hospital Attack Five Lessons from Diverse Information Sharing and Analysis Centers (ISACs) Bringing It All Together The Ecosystem View Leading by Example Free Cyber Incident Resources Cyber Incident Response Planning and Plans Standards, Frameworks, and Policies Exercise Templates Cyber Strategy Documents Incident Response Playbooks CERT Resources Cyber Insurance Guidance Lessons Learned Documents Training Opportunities, Including Cyber Ranges Laws and Reporting on Data Breaches and Protecting Data CRISIS Communications Acknowledgments About the Authors Notes Introduction Chapter 1: If I Had A Time Machine Chapter 2: Fail To Plan or Plan To Fail: Cyber Disruption Response Plans and Cyber Insurance Chapter 3: Practice Makes Perfect: Exercises, Cyber Ranges, and BCPS Chapter 4: What A Leader Needs to Do at the Top Chapter 5: Where Were You When The Sirens Went Off? Chapter 6: Where Do We Go When The Power Goes Off? Chapter 7: Teamwork In The Midst Of The Fire Chapter 8: What Went Right? Chapter 9: The Road To Recovery Chapter 10: What Went Wrong – How Did We Miss It? Chapter 11: Turning Cyber Incident Lemons Into Organizational Lemonade Index EULA

Successfully lead your company through the worst crises with this first-hand look at emergency leadership

Cyber security failures made for splashy headlines in recent years, giving us some of the most spectacular stories of the year. From the Solar Winds hack to the Colonial Pipeline ransomware event, these incidents highlighted the centrality of competent crisis leadership.

Cyber Mayday and the Day After offers readers a roadmap to leading organizations through dramatic emergencies by mining the wisdom of C-level executives from around the globe. It's loaded with interviews with managers and leaders who've been through the crucible and survived to tell the tale.

From former FBI agents to Chief Information Security Officers, these leaders led their companies and agencies through the worst of times and share their hands-on wisdom. In this book, you'll find out:

• What leaders wish they'd known before an emergency and how they've created a crisis game plan for future situations
• How executive-level media responses can maintain – or shatter – consumer and public trust in your firm
• How to use communication, coordination, teamwork, and partnerships with vendors and law enforcement to implement your crisis response

Cyber Mayday and the Day After is a must-read experience that offers managers, executives, and other current or aspiring leaders a first-hand look at how to lead others through rapidly evolving crises.

Digital Transformation And Cyber Insecurity Are Two Global Trends That Converged In 2020. The Covid-19 Pandemic Has Accelerated These Global Challenges Into Paradigm-changing Realities That Threaten To Destroy Every Company, Government, Network, And Individual. But What Can Be Done To Embrace The Accelerating Digital Disruption And At The Same Time Manage The Explosion Of Vulnerabilities, Cyber Threats, And Business Risks? What Strategies Are Enabling Technology Leaders To Thrive In This Fast-changing Landscape And Stay Calm In The Midst Of A World Filled With Ransomware, Online Deception, And Nation-state Hackers? Cyber Mayday And The Day After Is A Business Book, A Communication Toolkit Offering Stories, Strategies, Tactics, And Outlook With Key Extracts And Lessons Learned From Top C-executive Leaders Around The World. Some Of These Insights Come From Former Fbis, Nasa Agents, Government Cisos, And High Profile Cxos, Offering Practical Examples And Workable Solutions For Leaders To Succeed In The 21st Century. This Book Unpacks Key Learnings On Leadership And Nfluence. It Equips Readers With The Mastery Of Th R Stakeholders And Explores How To Effect A Cultural Change Within Organizations. Digital Transformation And Cyber Insecurity Are Two Global Trends That Converged In 2020. The Covid-19 Pandemic Has Accelerated These Global Challenges Into Paradigm-changing Realities That Threaten To Destroy Every Company, Government, Network, And Individual. But What Can Be Done To Embrace The Accelerating Digital Disruption And At The Same Time Manage The Explosion Of Vulnerabilities, Cyber Threats, And Business Risks? What Strategies Are Enabling Technology Leaders To Thrive In This Fast-changing Landscape And Stay Calm In The Midst Of A World Filled With Ransomware, Online Deception, And Nation-state Hackers? The Day After Mayday Is A Business Book, A Communication Toolkit Offering Stories, Strategies, Tactics, And Outlook With Key Extracts And Lessons Learned From Top C-executive Leaders Around The World. Some Of These Insights Come From Former Fbis, Nasa Agents, Government Cisos, And High Profile Cxos, Offering Practical Examples And Workable Solutions For Leaders To Succeed In The 21st Century. This Book Unpacks Key Learnings On Leadership And Nfluence. It Equips Readers With The Mastery Of Th R Stakeholders And Explores How To Effect A Cultural Change Within Organizations.--