Blog Archive

AI and Business Continuity: A Future Imagined

In this week’s bulletin, Charlie discusses the future of AI within the business continuity industry, with a particular focus on Business Impact Analysis and how it has the potential to revolutionise business continuity processes. Over the last couple of weeks, whenever I’ve been in the car, I’ve been listening to the BBC Sounds podcast The

Read More »

Supply Chain Continuity: Lessons Learned from the ISG Insolvency

In today’s bulletin, Charlie looks at the recent collapse of ISG and gives an insight into what we can learn about supply chain management. Nick Sims of Cornwood Consulting inspired this bulletin, by sharing recent insights into supply chain issues at Aston Martin. He mentioned, “In a strategic adjustment, Aston Martin announced it would reduce

Read More »

What is a SIMEX Exercise and What Are They Good For?

In this week’s bulletin, Charlie looks at the pros and cons of SIMEX (Simulation Exercise) and gives an insight into his experience running a live SIMEX. About three weeks ago, I planned, ran, and reported on the biggest SIMEX I have ever conducted in my whole career. It was a ‘no notice’ exercise, meaning the

Read More »

No-Notice Exercises – I Was Wrong…

In today’s bulletin, Charlie follows up from last week’s bulletin on no-notice exercises and shares some of his experiences of his recent live exercise. On Wednesday, PlanB Consulting conducted the biggest exercise we have ever planned and delivered. It was a no-notice exercise involving five different teams responding to a cyber incident. As per last

Read More »

Should You Conduct ‘No-Notice’ Exercises?

In this week’s bulletin, Charlie discusses the importance of no-notice exercises and the importance of planning in an exercise. Shortly, I will conduct the largest exercise I have ever carried out. It is a live exercise involving five different teams responding to a cyber incident. The exercise will involve a full role-playing cell, with role

Read More »

What Can We Learn About Disinformation From The Recent Riots?

In this week’s bulletin, Charlie discusses the recent riots that have taken place across the UK and looks at the effects that spreading disinformation can cause. According to the BBC, the police are on standby for possible further unrest over this weekend, so I thought I would discuss what we can learn about the importance

Read More »

CrowdStrike – Should Consultants Ambulance-Chase?

In this week’s bulletin, Charlie discusses the recent CrowdStrike outage and discusses the thoughts that other consultants have had on the incident. When I heard about the CrowdStrike incident, I was in the middle of the kingdom of Fife with my daughter picking up her new puppy. Desperate for the latest, I had her going

Read More »

Ransomware Victim Experience: RUSI Report

In this week’s bulletin Charlie highlights the key learnings from the RUSI Report. As a teacher of cyber incident management, I quite rarely get to hear first-hand about cyber incidents, and case studies are quite rare. The public sector has done a few, including SEPA, the London Library, and Gloucestershire City Council, but overall, information

Read More »

What Can We Learn From the Synnovis NHS Lab Cyber Attack?

In this week’s bulletin, Charlie discusses the recent NHS cyber attack and what lesssons we can learn from what happened. Last week I was keen to write a bulletin on the above subject, but I ran out of time. This week I was determined to get it written and out to bulletin readers. The incident

Read More »

Have Cyber Attacks Killed People? – Updated June 2024

In this week’s bulletin, Charlie continues his bulletin from 2022 on whether cyber attacks have killed people, and looks at the impacts of a cyber attack in the healthcare sector. In August 2022, I wrote the following bulletin ‘Have Cyber Attacks Killed People’ which looked at possible incidents which might have caused deaths. It looked at direct

Read More »

Where Do You Get Your News?

In this week’s bulletin, Charlie looks at different news platforms and gives his experience of comments left on LinkedIn for recent D-Day tributes. To date, I have contentiously avoided getting TikTok on my phone. Not for any moral reason, but as my youngest daughter Phoebe said, “Daddy, you will enjoy it too much.”. I can

Read More »

Who Should Lead Your Crisis or Incident Team?

In this week’s bulletin, Charlie discusses the role of a leader in a crisis team and looks at some of the key things to consider when choosing a leader. I went to an interesting and informative webinar this week titled ‘How to Lead Effectively in a Crisis‘, with Jonathan Hemus asking the questions and Sean

Read More »

Cyber Incident Management Exercises – Exercising Beyond the Basics

In this week’s bulletin, Charlie discusses what is covered in basic and advanced cyber exercises and looks at why organisations should consider running more sophisticated exercises. As cyber attacks continue apace – and having ran a sophisticated cyber exercise on Tuesday – I thought for this week’s bulletin, I would share some thoughts on ‘exercising

Read More »

A Schools Cyber Incident Response Checklist

This week, Charlie gives advice on how schools and trusts can prepare for cyber incidents and provides a useful checklist of considerations. In last week’s bulletin, I wrote about ‘Business Continuity Planning in Schools’. Once the bulletin had gone out, it occurred to me that I hadn’t mentioned anything about cyber, so I thought this

Read More »

Business Continuity Planning for Schools

In today’s bulletin, Charlie looks at the importance of business continuity plans in schools and discusses some of the events that schools should be planning for. Over the last few weeks, I have been working with an Academy Trust that has a number of primary and secondary schools, and I thought this week I would

Read More »

Lessons Identified from the Taiwan Earthquake

In today’s bulletin, Charlie discusses the devastating earthquake that has hit Taiwan and highlights the importance of ‘lessons learned’ after a disaster. We are accustomed to witnessing mass casualties from earthquakes. The Turkey earthquake, reported to have killed 56,000 people in February 2023 and the Morocco earthquake in September of the same year, which claimed

Read More »

Black Swans and Swiss Cheese – A Boat Crash in Baltimore

Charlie looks into the recent incident at Francis Scott Key Bridge in Baltimore and discusses the potential impacts of the accident. Often when I write my bulletin, it is about the latest cyber incident and what we can learn from it. However, last week, the crash of the MV Dali into the Francis Scott Key

Read More »

The British Library Cyber Incident Report – Standard or New Lessons?

In this week’s bulletin, Charlie looks into the cyber attack on the British Library and discusses what organisations can take away from the attack. It’s difficult to extract lessons learned from cyber response when you are not the responder. Most organisations don’t like to share their lessons, or when they do, they mainly do so

Read More »
Scroll to Top
Scroll to Top