2022 | Session 2
Analyzes session 2 - Breakout A Panel Session and evaluates key implications for security practitioners.
Summary
Panel Purpose
Scot Secure hosts a non-technical incident response planning panel. Moderator Jude notes CEOs are judged on breach handling, not merely being attacked, and shares tools attendees can take back.
First Response Steps
Scottish Business Resilience Centre speaker Declan Doyle advises pausing to breathe, scoping whether email or wider IT is affected, and engaging internal or external IT immediately with offline contact details if Teams or email is down.
Roles, Regulators, and Comms
Organizations need named incident leaders for legal, PR, and technical work; cyber-insurance may mandate specific IR firms. UK breaches may require ICO notification within twenty-four hours of discovery and sector regulators such as the FCA. Internal staff messaging must be planned alongside external statements.
Practice and Scottish Support
Plans should be written, exercised like fire drills, and backed by Police Scotland (101) and SBRC's incident line plus Cyber Scotland Partnership templates for contact lists and playbooks.
