Reputational Risks in Incident Response - How a Cyber Crisis Can Make or Break a Company's License

Chris Cwalina, Global Co-Head of Information Governance, Privacy and Cybersecurity, Norton Rose Fulbright LLP
Jeremy Koppen, Managing Director of Incident Response, Mandiant
Adam Tice, Chief Information Security Officer, Colonial Pipeline
Jamie Singer, Managing Director, Cybersecurity Crisis Communications, FTI Consulting
Panelists, who have worked together in various capacities on some of the most headline grabbing cybersecurity attacks around the world, will share war stories from the front lines on how to collaborate across functions to effectively manage stakeholder communications after an incident. Attendees will learn how an incident response team should be structured - comprising legal, forensics, crisis communications and in-house security roles - and how they can work together so that information flows between workstreams in an efficient but privileged manner. Panelists, who each represent one critical component of an incident response team, have successfully navigated some of the stickiest communications situations resulting from a cyberattack, including Congressional investigations, disclosing root cause and ransom payments to the press, customers putting the victimized company in the penalty box, having to stay ahead of evolving threat actor pressure tactics, investor relations issues and more. Speakers will share what they have seen go well and where they tend to see companies fall short in terms of protecting their reputations and valued relationships with key stakeholders.