Do This, Not That: What the Best-prepared Organizations Do Differently | Resilience Risk Briefing

Recovery speed comes down to a few early decisions. Hear what the best-prepared organizations do differently when an incident hits.

3 Min Read

Do this, not that: how the best-prepared organizations handle the first 24 hours

When an incident hits, the gap between a quick recovery and a prolonged one usually comes down to a handful of decisions made in the first 24 hours. Most organizations have a plan on paper, but few have tested the escalation calls, playbooks, and communication choices that have to hold up under pressure.

In this session, Jud Dressler of Resilience moderates a conversation with Karla Reffold of Surefire Cyber and Scott Tenenbaum of Resilience on what the best-prepared organizations do differently, and the practical steps clients, brokers, and risk managers can take before an incident to respond faster and limit the damage.

About Speakers

Karla Reffold is Chief Insights Officer at Surefire Cyber, where she also leads the company’s Cyber Intelligence team. Karla leads Surefire Cyber’s efforts to leverage the company’s tech-enabled platform to deliver valuable data and relevant insights to clients, insurance carriers, and law firms. Her background in cyber threat intelligence positions her to help partners further define their data needs, develop the company’s cyber intelligence offering, and provide actionable insight that allows these partners to better manage risk across their portfolios.

Any company that sells hardware or software with network connectivity into an EU member state has to report vulnerabilities and incidents affecting that product. The regulation calls these products with digital elements, and it applies to the manufacturer regardless of where the manufacturer is based, so a US firm with no EU presence is covered from the moment its first unit ships into the single market.