Do this, not that: how the best-prepared organizations handle the first 24 hours
When an incident hits, the gap between a quick recovery and a prolonged one usually comes down to a handful of decisions made in the first 24 hours. Most organizations have a plan on paper, but few have tested the escalation calls, playbooks, and communication choices that have to hold up under pressure.
In this session, Jud Dressler of Resilience moderates a conversation with Karla Reffold of Surefire Cyber and Scott Tenenbaum of Resilience on what the best-prepared organizations do differently, and the practical steps clients, brokers, and risk managers can take before an incident to respond faster and limit the damage.
About Speakers

Karla Reffold is Chief Insights Officer at Surefire Cyber, where she also leads the company’s Cyber Intelligence team. Karla leads Surefire Cyber’s efforts to leverage the company’s tech-enabled platform to deliver valuable data and relevant insights to clients, insurance carriers, and law firms. Her background in cyber threat intelligence positions her to help partners further define their data needs, develop the company’s cyber intelligence offering, and provide actionable insight that allows these partners to better manage risk across their portfolios.

Scott Tenenbaum is the Head of Claims, North America, at Resilience. Before joining Resilience, he was the Head of North American Cyber Claims at AXIS, where he led a team of claim professionals that handled cyber claims (first and third-party) as well as Technology E&O, Miscellaneous E&O and Media E&O matters. Prior to that, Scott worked in the financial lines unit at CNA Insurance and spent eight years at a national law firm in New York litigating professional liability matters. He earned his law degree from Pace University School of Law and a B.S. in Business from the University of Maryland.

Judson Dressler is the Director of the Risk Operations Center. Dressler recently joined Resilience after serving 20 years in the U.S. Air Force. He was previously the Permanent Professor and Head of the Department of Computer and Cyber Sciences at the United States Air Force Academy, where he taught more than 1,200 cadets each year and conducted long-term artificial intelligence and cybersecurity research.
He served as the Commander of the 835th Cyberspace Operations Squadron, where he led 134 cyber airmen to conduct threat-focused, intelligence-driven defensive cyberspace operations. Dressler holds a PhD in Computer Science from Rice University and a Master’s in Computer Science from the U.S. Air Force Institute of Technology.
Any company that sells hardware or software with network connectivity into an EU member state has to report vulnerabilities and incidents affecting that product. The regulation calls these products with digital elements, and it applies to the manufacturer regardless of where the manufacturer is based, so a US firm with no EU presence is covered from the moment its first unit ships into the single market.