{"id":150852,"date":"2025-09-04T10:51:14","date_gmt":"2025-09-04T09:51:14","guid":{"rendered":"https:\/\/www.vuelio.com\/uk\/?p=150852"},"modified":"2025-09-04T12:27:00","modified_gmt":"2025-09-04T11:27:00","slug":"cyber-crisis-is-a-completely-different-animal-advice-on-planning-a-cyber-secure-comms-strategy","status":"publish","type":"post","link":"https:\/\/www.vuelio.com\/uk\/blog\/cyber-crisis-is-a-completely-different-animal-advice-on-planning-a-cyber-secure-comms-strategy\/","title":{"rendered":"\u2018Cyber crisis is a completely different animal\u2019: Advice on planning a cyber secure comms strategy"},"content":{"rendered":"<p><strong>\u2018The thing to remember: it&#8217;s not a normal crisis\u2019 &#8211; that\u2019s Joanne Gill\u2019s advice for comms teams. And Joanne would know: her organisation <a href=\"https:\/\/www.cyberreadiness.co.uk\/\">Cyber Crisis Readiness &amp; Response<\/a> is geared towards helping comms teams who are faced with cyber security crises.<\/strong><\/p>\n<p>And in today\u2019s climate, every comms team is at risk. Any organisation with an internet connection could be subject to a cyber attack, a data leak, or a deep fake of their c-suite in today\u2019s climate of increased danger. According to Panorama report \u2018Fighting Cyber Criminals\u2019, there were an estimated 19,000 ransomware attacks on UK businesses in 2024, and that number is only set to grow.<\/p>\n<p>\u2018You have to have a separate part of your crisis comms plan, a separate process, a separate mind map. Don&#8217;t fall back on your usual muscle memory, because it&#8217;s not going to work for you,\u2019 adds Joanne, who equips organisations across the UK with the confidence to withstand and recover from the dangers of a cyberattack.<\/p>\n<p>Read on for what to learn from recent crises that hit the headlines; practical steps for getting started on your plan; and where comms can get particularly complicated\u2026<\/p>\n<h3>Lessons to learn from the 2025 summer of cyberattacks<\/h3>\n<p>\u2018All comms teams need to be prepared for something like this to happen to them, and other organisations in their sector. Identify stakeholders, have statements that are ready to go,\u2019 advises Joanne.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-150863 aligncenter\" src=\"https:\/\/www.vuelio.com\/uk\/wp-content\/uploads\/2025\/09\/Gxfw1X0WoAAp-w1.jpg\" alt=\"Cyberattacks are on the rise\" width=\"760\" height=\"430\" srcset=\"https:\/\/www.vuelio.com\/uk\/wp-content\/uploads\/2025\/09\/Gxfw1X0WoAAp-w1.jpg 760w, https:\/\/www.vuelio.com\/uk\/wp-content\/uploads\/2025\/09\/Gxfw1X0WoAAp-w1-300x170.jpg 300w, https:\/\/www.vuelio.com\/uk\/wp-content\/uploads\/2025\/09\/Gxfw1X0WoAAp-w1-705x399.jpg 705w, https:\/\/www.vuelio.com\/uk\/wp-content\/uploads\/2025\/09\/Gxfw1X0WoAAp-w1-500x283.jpg 500w\" sizes=\"(max-width: 760px) 100vw, 760px\" \/><\/p>\n<p>\u2018The key thing that&#8217;s different with a cyber crisis is, how do you actually distribute that? If all of your systems are down (for example, M&amp;S had to revert to pen and paper), how do you distribute your statement to journalists?<\/p>\n<p>\u2018There&#8217;s that added complication of having a distribution list that is not attached to a system which might go down. Ask yourself &#8211; do I know how I&#8217;m going to contact people? Where am I keeping that information? If I&#8217;ve got a crisis communication plan, do I have a paper copy of that? Do the people who are involved in that have a paper copy of it? And how are we going to communicate and actually do our jobs, get approvals for things that we put out when our systems are all down?\u2019<\/p>\n<h3>Cyber crisis versus crisis<\/h3>\n<p>\u2018The additional element with a cyber crisis is that you need to be a good corporate citizen. With a cyber crisis, you&#8217;re not the sole victim. Your suppliers are potentially victims &#8211; it\u2019s going to cost them money, one way or another.<\/p>\n<p>\u2018All the usual things that you would do in a crisis need to be considered &#8211; how do we shore up the reputation of the company? How do we reassure people? How do we say sorry? But you also need to also look at how to be a good corporate citizen, preventing further harm to all of the people who are in your business ecosystem.<\/p>\n<p>\u2018That is about communicating with CISOs (Chief Information Security Officers), telling them what the solution is to this problem, and how they can prevent contagion to their own systems. You&#8217;ve got a whole load of communication that has to happen before anybody even thinks about what to say to the media.<\/p>\n<p>\u2018The media isn&#8217;t going to drive how a company recovers. That&#8217;s going to be how you deal with your stakeholders &#8211; the media is just a route to communicate with those stakeholders.<\/p>\n<p>\u2018A cyber crisis is a different animal to other crises.\u2019<\/p>\n<p><iframe loading=\"lazy\" width=\"560\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/9LES8XvhghM?si=Oeo8rb8z9ez11Lvt\" title=\"YouTube video player\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe> <\/p>\n<h3>Practical steps for planning your response<\/h3>\n<p>\u2018Ensure that you have those stakeholder distribution lists and that you&#8217;ve done some analysis in advance about who you need to communicate with, and what to do if all your systems are down.<\/p>\n<p>\u2018Make sure that you&#8217;ve got all of the suppliers, all of your ecosystems, chief executive security officer details so that you can contact them, so your technical people can write to them. And that&#8217;s very different messaging to that of reassuring your customers.<\/p>\n<p>\u2018It&#8217;s about segmenting, making sure that you&#8217;ve got that information available outside of your usual systems.\u2019<\/p>\n<h3>CEO statements: Always a solid comms strategy?<\/h3>\n<p>\u2018As a comms team, you know whether your chief exec is somebody that you want to put forward &#8211; it\u2019s what companies traditionally do for crisis comms. You do the media training, emphasing the need to be apologetic, to be empathetic.<\/p>\n<p>\u2018But I don&#8217;t know\u2026 the other element with cyber issues is that the more content you have of your senior team in the public domain, the more opportunity there is for criminals to use AI deep fake tech. To do some social engineering, and then use that to get access to your systems. Nobody is going to argue with the CEO if they call a help desk in the middle of the night and say \u201creset my password\u201d.\u2019<\/p>\n<h3>Extra complications to consider<\/h3>\n<p>\u2018It\u2019s so complicated because you&#8217;ve got things like GDPR, there are potential fines coming further down the line. Cyber crisis is a multi-layered, complicated thing.<\/p>\n<p>\u2018Comms teams who come into this thinking that it&#8217;s going to be like a regular crisis will come unstuck very quickly.\u2019<\/p>\n<p><em>For more on planning your strategy, watch Vuelio\u2019s webinar \u2018<a href=\"https:\/\/www.vuelio.com\/uk\/resources\/webinars\/cyberattack-crisis-comms\">Cyberattack Crisis Comms<\/a>\u2019, or read our overview of the key points covered <a href=\"https:\/\/www.vuelio.com\/uk\/blog\/is-your-team-ready-to-respond-to-a-cyber-comms-crisis\">here<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Is your organisation prepared for a cyber comms crisis? Get advice from Cyber Crisis Readiness &#038; Response&#8217;s Joanne Gill on mapping your stakeholders, assembling your assets, and prepping your comms plan. <\/p>\n","protected":false},"author":423,"featured_media":150869,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[7272,3725,3729],"tags":[],"_links":{"self":[{"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/posts\/150852"}],"collection":[{"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/users\/423"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/comments?post=150852"}],"version-history":[{"count":5,"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/posts\/150852\/revisions"}],"predecessor-version":[{"id":150865,"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/posts\/150852\/revisions\/150865"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/media\/150869"}],"wp:attachment":[{"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/media?parent=150852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/categories?post=150852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vuelio.com\/uk\/wp-json\/wp\/v2\/tags?post=150852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}