Development of a roadmap of cyber crisis management exercises

Context

Alcyconie was asked by an emblematic French luxury house to increase its cyber resilience in the long term. With a very long history and a strong internal identity and culture, its organization is based on a set of subsidiaries with various perimeters, cultures and levels of maturity, particularly in terms of cybersecurity and crisis management. In a context of increasing cyber threats and awareness of their potential impacts on strategic and sensitive activities, the company wanted to take a step to sustainably strengthen its resilience to cyber crises, at the group level.

Objectifs

• The objective of the mission was to support the client in the development of a roadmap of cyber crisis management exercises over two years, in order to improve its resilience in the long term. This roadmap had to be based on what already exists, while identifying the priority levers for progress at the group and subsidiary level.

Mission Description

• The mission began with interviews with critical functions from different divisions of the group and subsidiaries. This cross-functional approach has made it possible to better understand the real functioning of the organization, its crisis practices, its operational constraints and the real level of maturity of each business line and each subsidiary in the face of cyber-related crises.
• In parallel with these interviews, an analysis of existing systems was carried out in order to identify concrete areas for improvement, which were then translated into operational recommendations: adapted cyber exercise scenarios, prioritization of the themes to be worked on, type of training adapted to each audience and management and complementary needs (changes in systems, clarification of roles, organizational updates).
• At the end of this analysis phase, Alcyconie developed the targeted training program with a view to anchoring the culture of training and preparation for cyber crises at the group level.

Challenges and specificities

The mission was part of a particularly demanding context:

• A complex organization,
• Significant maturity differences between subsidiaries,
• A very marked corporate culture, inherited from a long history and specific ways of operating.

The challenge was therefore to develop a realistic, progressive and unifying roadmap, capable of adapting to this diversity while strengthening the overall coherence of cyber crisis management.

Alcyconie’s added value expertise

Alcyconie’s added value lay in its ability to bring a new and independent external perspective to the client’s crisis organization, to challenge existing practices and to bring together the points of view of actors who communicate little on a daily basis.

Thanks to a cross-functional approach, going beyond the sole consideration of the technical challenges of cyber crises, we enabled the client to better align business, IT and management visions, and to structure a clear trajectory to sustainably strengthen its cyber resilience at the group level.