Executive Training

Executive training prepares senior leaders for the two ways cyber risk reaches them: as targets of well-researched attacks that use their authority and access, and as the people who must decide, under pressure, how the organization responds when something goes wrong. It covers what these attacks look like, how to make risk decisions with imperfect information and what leadership is expected to do during an incident.

It matters because executives are attractive targets and because incident decisions, whether to disclose, whether to pay, whom to notify and when, are theirs to make. Leaders who have thought about those decisions in advance make them faster and defend them better. The training also sets the tone: when executives take security seriously, the organization follows.

Start with a focused session of an hour or less that uses realistic examples, including a request that appears to come from one of them. Walk through one incident scenario to the point of a decision. Give each leader a short checklist for the first day of an incident. Joe can help you build the briefing and the checklist; your legal and communications advisers shape the decisions themselves.