Crisis Management – Beacon in the Storm

This article provides practical guidance on establishing and executing an effective crisis management and communication process for ransomware and broader incidents. It emphasizes swift, transparent, and tailored communications to internal and external stakeholders; the importance of defined roles, templates, and regular updates; and compliance with regulatory reporting timelines (e.g., NIS2, DORA, GDPR). The piece outlines the crisis lifecycle—from declaration and stakeholder notifications to response coordination, completion, and lessons learned—using a ransomware scenario to illustrate internal and external communication strategies.