Resilience after the attack: intervention by Alcyconie on the occasion of the 4th edition of SecNumEco

Organizational resilience at the heart of the priorities

After a remarkable intervention for the 3rd edition of SecNumEco last year on the theme of cyber crisis management (19 and 20 September 2019), the company Alcyconie intervened this year in tandem with Eric Durand, CIO of Cooperl on the theme of “Resilience after the attack”.

The choice of theme is indicative of the importance of ensuring post-cyber attack follow-up, regardless of the company’s level of maturity and preparedness in the areas of crisis management and disaster recovery.

The example of Cooperl, an agricultural and agri-food cooperative in the Grand Ouest, is symptomatic.

On the night of 8 to 9 May 2020, a public holiday in the middle of the lockdown period, Cooperl suffered a Ransomware cyberattack. Despite a protected computer system, regularly updated and actions taken in the very short term, the company took several months to return to normal.

The days following the attack were crucial in terms of people and the organization of the teams, who were extremely solicited in order to be able to contain the crisis. Cooperl’s gradual return to a stable situation was finally able to take place thanks to regular actions and the transcription of feedback from the teams mobilised during the crisis.

The main stages of the cyber crisis

This timeline specific to the risks of cyberspace between the detection of the attack and the crisis recovery phase is Alcyconie’s core business. A cyber crisis is a long-term one, and it is necessary to split the stages that make up it. During this webinar, each stage experienced by Cooperl and explained by Éric Durand was deciphered by Stéphanie Ledoux, to deliver lessons, provide clarifications and insights under the gaze of the expertise in crisis management.

Three stages are to be distinguished:

• The actions to be taken in the short term for the purpose of investigating and understanding the attack that occurred;
• A time dedicated to remediation and anticipating the return to a healthier situation for the teams;
• A final time acting as a relay between the end of the crisis and the post-crisis, dedicated to optimization, continuous improvement and lessons to be learned.

Support before, during and after the crisis

Alcyconie’s training, awareness and support offer highlights the highlights and the organization of the teams thanks to advice provided as close as possible to its customers at each stage of the crisis.