Top Allies for Executives & Boards to Leverage During a Cyber Crisis

**Executive summary:** This commentary outlines best practices for preparing for and managing cyber crises, stressing the importance of secure, ongoing communications (war rooms), clearly defined roles and decision authorities, built-in redundancy and alternative communication/operation paths (PACE), and regular tabletop exercises and playbook testing to reduce business and reputational damage; it cites Maersk's NotPetya response as an illustrative example.