Development of a cyber crisis management system and training of operational and decision-making teams

Context

An industrialist and retailer in the cosmetics sector has expressed the wish to define a corpus of documents with operational and decision-making scope, to provide its teams, in France and abroad, with a common and pragmatic base. In a second phase, this device was to be tested and energized as part of exercises.

Objectifs

• Define a common corpus of documents adapted to all countries, according to their specificities;
• Test the crisis and business continuity system;
• Test the coordination of the actors in the crisis;
• Identify the natural reflexes of the crisis unit;
• Illustrate the plurality of impacts of a cyber-related crisis and the complexity of decision-making in a degraded situation;
• Work on the modalities and communication strategy of the crisis unit towards its various stakeholders.

Mission Description

The mission took place in 3 distinct phases:

• After a phase of familiarizing themselves with the existing documentation and crisis procedures, Alcyconie conducted a series of interviews with the IT department’s business lines and decision-making functions.
• This was followed by the development of crisis procedures.
• This system was then put under pressure through the realization of two crisis exercises (1 operational and 1 decision-making) which made it possible to train the teams in realistic conditions and validate the relevance of the newly created procedures.

Challenges and specificities

• Multi-country and multi-cultural organization with different perceptions and appetites for cyber crisis management.
• A strong culture, a significant maturity in crisis management, with a need to anchor the specificities related to cyber crises.