The workshop, aimed at cyber emergency preparedness, emphasizes collaboration and experience sharing. Participants are encouraged to explore and answer important questions regarding internal and external communication during cyber incidents. The discussion highlights the importance of having resilient communication mechanisms in place, especially in the case of ransomware attacks. The workshop details different strategies like utilizing third-party tools and resource allocation for effective crisis management. It stresses the significance of informing all employees and stakeholders through diverse channels, questioning the adequacy of current systems. Suggestions are made to keep service providers and authorities informed promptly, and to involve legal and communication departments in creating templates for press releases and employee notifications. The necessity for predefined emergency plans, regular updates, and testing procedures are underlined, with an emphasis on business continuity and involvement of specialized cybersecurity knowledge, especially in areas like OT security. Recommendations include rigorous patch management, multi-factor authentication, and enhancing employee cybersecurity awareness through innovative campaigns. An analytical approach is proposed, suggesting regular testing of scenarios and systems to identify vulnerabilities while creating contingency plans to ensure robust system recovery in case of attacks.
