Although a cyber crisis can last for weeks and even months, how it is managed in those first few days can often determine whether the operational, financial and reputational impact are materially curtailed or amplified.  When your response is robust, and widely perceived as such, a trustee board may even have an opportunity to translate this unwelcome event into a catalyst for genuine positive change.

 

However, major cyber attacks on pension schemes are rarely straightforward.  Very often the cyber attack is on one of your key suppliers, such as an administrator, and therefore a significant number of schemes, and not just yours, is directly impacted. 

 

Very often it's not clear what data has been accessed, modified, encrypted, exfiltrated (stolen), advertised for sale or published for all and sundry to see.  In fact, in some cases, multiple ransom notes may be received, some from the perpetrator and some from opportunistic groups, each convincing and sobering in equal measure.  And we haven't even touched on the challenges of recovering IT systems and data and conducting all the various types of testing. 

Leveraging years of pension sector experience and decades of cyber 'scars', a principal cyber consultant from Cyserri can bring confidence that the right people are involved, the right voices are being heard, the right questions are being asked, the right decisions are being made, the right information is being recorded and all these things are taking place in the right order.