header-logo header-logo

This is a drill!

28 November 2025 / Jack Morris
Issue: 8141 / Categories: Features , Profession , Cyber , Cybercrime , Technology , Risk management
printer mail-detail
237018
Cyber resilience goes beyond documentation. Businesses should stress-test their response in real time, writes Jack Morris
  • Paper-based cyber response strategies often collapse in real incidents; real-time adaptability is essential.
  • Simulations sharpen instincts—immersive tabletop exercises train teams to make fast, coordinated decisions under stress.
  • These drills empower legal teams, boost insurer confidence and turn organisations into proactive cyber defenders.

When a cyberattack strikes, the disruption is immediate and the clock starts ticking. Whether it’s ransomware, data exfiltration or denial-of-service, organisations don’t have the luxury of leafing through manuals. Every second counts and every decision matters.

Despite the increasing frequency and sophistication of cyber threats, many companies continue to place their trust in static, paper-based cyber incident response (CIR) plans. These documents may satisfy regulatory checkboxes, but in the heat of a live breach, they often prove inadequate. Plans that look watertight on paper can unravel in practice, especially when legal teams, IT and the board are suddenly thrust into a high-pressure, high-stakes environment.

As someone who regularly supports businesses, law firms and insurers in navigating this space,

If you are not a subscriber, subscribe now to read this content
If you are already a subscriber sign in
...or Register for two weeks' free access to subscriber content

MOVERS & SHAKERS

Muckle LLP—Stacey Brown

Muckle LLP—Stacey Brown

Corporate governance and company law specialist joins the team

Excello Law—Heather Horsewood & Darren Barwick

Excello Law—Heather Horsewood & Darren Barwick

North west team expands with senior private client and property hires

Ward Hadaway—Paul Wigham

Ward Hadaway—Paul Wigham

Firm boosts corporate team in Newcastle to support high-growth technology businesses

NEWS

NOTICE UNDER THE TRUSTEE ACT 1925

HERBERT SMITH STAFF PENSION SCHEME (THE “SCHEME”)

NOTICE TO CREDITORS AND BENEFICIARIES UNDER SECTION 27 OF THE TRUSTEE ACT 1925
Law firm HFW is offering clients lawyers on call for dawn raids, sanctions issues and other regulatory emergencies
From gender-critical speech to notice periods and incapability dismissals, employment law continues to turn on fine distinctions. In his latest employment law brief for NLJ, Ian Smith of Norwich Law School reviews a cluster of recent decisions, led by Bailey v Stonewall, where the Court of Appeal clarified the limits of third-party liability under the Equality Act
Non-molestation orders are meant to be the frontline defence against domestic abuse, yet their enforcement often falls short. Writing in NLJ this week, Jeni Kavanagh, Jessica Mortimer and Oliver Kavanagh analyse why the criminalisation of breach has failed to deliver consistent protection
Assisted dying remains one of the most fraught fault lines in English law, where compassion and criminal liability sit uncomfortably close. Writing in NLJ this week, Julie Gowland and Barny Croft of Birketts examine how acts motivated by care—booking travel, completing paperwork, or offering emotional support—can still fall within the wide reach of the Suicide Act 1961
back-to-top-scroll