header-logo header-logo

28 November 2025 / Jack Morris
Issue: 8141 / Categories: Features , Profession , Cyber , Cybercrime , Technology , Risk management
printer mail-detail

This is a drill!

237018
Cyber resilience goes beyond documentation. Businesses should stress-test their response in real time, writes Jack Morris
  • Paper-based cyber response strategies often collapse in real incidents; real-time adaptability is essential.
  • Simulations sharpen instincts—immersive tabletop exercises train teams to make fast, coordinated decisions under stress.
  • These drills empower legal teams, boost insurer confidence and turn organisations into proactive cyber defenders.

When a cyberattack strikes, the disruption is immediate and the clock starts ticking. Whether it’s ransomware, data exfiltration or denial-of-service, organisations don’t have the luxury of leafing through manuals. Every second counts and every decision matters.

Despite the increasing frequency and sophistication of cyber threats, many companies continue to place their trust in static, paper-based cyber incident response (CIR) plans. These documents may satisfy regulatory checkboxes, but in the heat of a live breach, they often prove inadequate. Plans that look watertight on paper can unravel in practice, especially when legal teams, IT and the board are suddenly thrust into a high-pressure, high-stakes environment.

As someone who regularly supports

If you are not a subscriber, subscribe now to read this content
If you are already a subscriber sign in
...or Register for two weeks' free access to subscriber content

MOVERS & SHAKERS

Thomson Hayton Winkley—Jordan Wallace

Thomson Hayton Winkley—Jordan Wallace

Thomson Hayton Winkley strengthens family law team

Ward Hadaway—Barnaby Rosenthall

Ward Hadaway—Barnaby Rosenthall

Construction lawyer returns to Ward Hadaway in Teesside role

Bird & Bird—Shahin Baghaei

Bird & Bird—Shahin Baghaei

Bird Bird hires leading legal transformation expert

NEWS
Legal aid deserts leave almost one in four without adequate access to justice
The Solicitors Regulation Authority (SRA) has warned solicitors and law firms that using artificial intelligence does not alter their professional obligations, amid concerns over inaccurate legal material and client confidentiality
From forgotten interest claims to case-management appeals, a string of procedural developments offers useful—and occasionally cautionary—lessons for practitioners

Jonathan Fisher KC highlights that it now accounts for around 40% of criminal offences, with roughly 70% involving technology, and argues that the UK cannot simply prosecute its way out of the problem. Detection, investigation and prosecution all require improvement, while different fraud types demand tailored responses.

How forcefully can a litigant criticise a public authority before robust advocacy crosses the line into unreasonable conduct? 
back-to-top-scroll