The Boardroom Firewall (Ep. 13) — Incident Response and Crisis Communications

From Holding the Line: Practical IT Security · 00:43:18

Show by SECURITIES

Welcome to Episode 13 of the podcast series exploring The Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda.In this episode, we cover Chapter 13: "Incident Response and Crisis Communications". We examine how leadership teams navigate the critical hours and days following a cyber incident, from establishing clear decision-making authority and out-of-band communications to managing regulatory deadlines, customer transparency, and crisis messaging.Key Topics Covered in This Episode:The Incident Response Plan as a Fire Drill: Why an incident plan is about pre-agreed habits rather than unread paperwork, and how out-of-band communication channels ensure leadership can coordinate if primary networks are compromised.Who Decides What, and When: Establishing clear layers of authority between technical responders, the incident manager, executive leadership, and board oversight—and why maintaining a contemporaneous decision log protects the company.Navigating Regulatory and Stakeholder Deadlines: Understanding statutory notification clocks (such as the 72-hour GDPR window), contractual customer notices, and investor disclosure rules.Crafting Honest Crisis Communications: Why plain-language transparency beats vague corporate boilerplate ("out of an abundance of caution"), and how a "holding statement" buys time while facts are verified.Engaging Outside Experts & Law Enforcement: How forensic investigators, breach counsel, crisis PR advisors, and law enforcement work together—and why maintaining legal privilege requires proper sequencing.Common Leadership Traps in a Crisis: Avoiding early blame-seeking, premature reassurances, micromanaging technical work, and skipping the post-incident "lessons-learned" review.Plain-Language Governance: Translates complex threats like ransomware, supply-chain vulnerabilities, and AI into clear business decisions.Practical Frameworks: Features a running case study of Meridian Foods, an Appendix of Board-Level Questions, a One-Page Board Dashboard Template, and a ready-to-run tabletop exercise.The 90-Day Board Cyber Action Plan: Concludes with a concrete, week-by-week roadmap that leadership teams can put to use immediately.About the Book: The Boardroom FirewallThe Boardroom Firewall: What Every Executive Must Know About Cyber Risk, Ransomware, and AI by Sho Shimoda is a calm, plain-language guide written specifically for chief executives, board members, founders, and senior leaders in finance, operations, legal, and risk.Rather than teaching technical skills or system configuration, the book equips non-technical leaders with the judgment and confidence needed to manage cyber risk as an ordinary business risk. It cuts through industry jargon with everyday analogies, real-world boardroom vignettes, and actionable governance tools.Key Highlights of the Book:Plain-Language Governance: Translates complex threats like ransomware, supply-chain vulnerabilities, and AI into clear business decisions.Practical Frameworks: Features a running case study of Meridian Foods, an Appendix of Board-Level Questions, a One-Page Board Dashboard Template, and a ready-to-run tabletop exercise.The 90-Day Board Cyber Action Plan: Concludes with a concrete, week-by-week roadmap that leadership teams can put to use immediately.

More episodes of Holding the Line: Practical IT Security

More episodes

PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.