header-logo header-logo

This is a drill!

28 November 2025 / Jack Morris
Issue: 8141 / Categories: Features , Profession , Cyber , Cybercrime , Technology , Risk management
printer mail-detail
237018
Cyber resilience goes beyond documentation. Businesses should stress-test their response in real time, writes Jack Morris
  • Paper-based cyber response strategies often collapse in real incidents; real-time adaptability is essential.
  • Simulations sharpen instincts—immersive tabletop exercises train teams to make fast, coordinated decisions under stress.
  • These drills empower legal teams, boost insurer confidence and turn organisations into proactive cyber defenders.

When a cyberattack strikes, the disruption is immediate and the clock starts ticking. Whether it’s ransomware, data exfiltration or denial-of-service, organisations don’t have the luxury of leafing through manuals. Every second counts and every decision matters.

Despite the increasing frequency and sophistication of cyber threats, many companies continue to place their trust in static, paper-based cyber incident response (CIR) plans. These documents may satisfy regulatory checkboxes, but in the heat of a live breach, they often prove inadequate. Plans that look watertight on paper can unravel in practice, especially when legal teams, IT and the board are suddenly thrust into a high-pressure, high-stakes environment.

As someone who regularly supports

If you are not a subscriber, subscribe now to read this content
If you are already a subscriber sign in
...or Register for two weeks' free access to subscriber content

MOVERS & SHAKERS

Muckle LLP—Ella Johnson

Muckle LLP—Ella Johnson

Real estate dispute resolution team welcomes newly qualified solicitor

Morr & Co—Dennis Phillips

Morr & Co—Dennis Phillips

International private client team appoints expert in Spanish law

NLJ Career Profile: Stefan Borson, McCarthy Denning

NLJ Career Profile: Stefan Borson, McCarthy Denning

Stefan Borson, football finance expert head of sport at McCarthy Denning, discusses returning to the law digging into the stories behind the scenes

NEWS
Michael Zander KC, emeritus professor at LSE, revisits his long-forgotten Crown Court Study (1993), which surveyed 22,000 participants across 3,000 cases, in the first of a two-part series for NLJ
Getty Images v Stability AI Ltd [2025] EWHC 2863 (Ch) was a landmark test of how UK law applies to AI training—but does it leave key questions unanswered, asks Emma Kennaugh-Gallagher of Mewburn Ellis in NLJ this week
Cryptocurrency is reshaping financial remedy cases, warns Robert Webster of Maguire Family Law in NLJ this week. Digital assets—concealable, volatile and hard to trace—are fuelling suspicions of hidden wealth, yet Form E still lacks a section for crypto-disclosure
NLJ columnist Stephen Gold surveys a flurry of procedural reforms in his latest 'Civil way' column
Paper cyber-incident plans are useless once ransomware strikes, argues Jack Morris of Epiq in NLJ this week
back-to-top-scroll