Russian Cyber Threats: Practical Advice For Security Leaders

## Executive summary A practical advisory for security leaders on preparing for Russian-aligned cyber threats related to the Russia–Ukraine conflict, outlining prioritized actions (team welfare, threat modelling, executive communications), recommended exercises (tabletops and purple team), and technical mitigations for likely scenarios including DDoS, destructive wiper malware (e.g., HermeticWiper), and ransomware/extortion groups (e.g., Conti); emphasizes leveraging internal telemetry and external intelligence and playing the long game rather than reacting to daily headlines.