ABSTRACT

A good team will need an effective leader, a core team from across the organisation, ad hoc members who have specialist knowledge that can be called on where necessary, and contacts with any necessary external resources. A team has to start with a leader. While cyber risks vary considerably it is generally sensible to have a single person leading the cyber risk team. The cyber risk leader needs to be acknowledged as the leader, to have accountability for managing risk, and also to have the 'power' to ensure that any decisions made are implemented. Core Team is likely that most cyber incidents have a number of different causes. As mentioned elsewhere these causes can be categorised as technology, business process and people causes. As a cyber incident may involve the compromise or failure of business communication channels it is sensible to communicate via other channels such as personal Gmail addresses or mobile phones.