Crisis Communications Management in cyber Security

PGI Cyber Academy - Completion Certificate

By the end of this training, you will be able to create a Crisis Media Strategy (including holding statements and management of social media) to prepare your organisation for managing media interest in potential situations – where management of the press is vital.

• A member of staff being considered or appointed as an official spokesperson, who is required to address media queries regarding all of the entities issues including official statements during crises.
• Anyone who performs public relations (PR) duties, internal or external communications, social media interaction, or written/verbal media messaging.
• Executives, or senior roles which have the authority to address the media on behalf of an organisation.

• Consider various cyber security aspects of business continuity and disaster recovery planning and including testing.
• Understand the importance of crisis management protocols, processes and techniques relevant to the organisation’s cyber security.
• Determine organisation’s leadership, structure and cyber decision-making processes in a crisis.
• Build and utilise problem solving skills to recognise organisational challenges and relationships.
• Discuss concepts with others to convey information effectively.
• Develop the ability to write about facts and ideas in a clear, convincing and organised manner.
• Prepare crisis media plans and related documentation.
• Construct clear and concise cyber crisis briefings for the media.

Knowledge of:

• Relevant cyber security aspects of legislative and regulatory requirements, relating to ethics and privacy.
• Principles of cyber security and privacy.
• Cyber security related threats and vulnerabilities.
• Likely operational impact of cyber security breaches on an organisation.
• Business practices within an organisation.
• Cyber security and privacy principles and organisational requirements.
• IT security principles and methods.
• Core business processes and how cyber security affects them.
• Cyber security policies, procedures and regulations.
• Different classes of cyberattacks.
• Relevant laws, legal authorities, restrictions and regulations that govern and are applicable to cyber security activities.
• Organisational objectives, leadership priorities and risk management methods.
• Who is developing an organisation’s strategies, policies and plans, along with their contact details and their expectations.
• An organisation’s policies and standard operating procedures relating to cyber security.
• Confidentiality, integrity and availability principles.

This training can be tailored to an industry or for a defined audience, with various durations. Example topics typically include:

Introduction Cyber security and what is considered a crisis in cyber security

• Introduction to Communications & Awareness
• Reputation Management
• Good and bad experiences of dealing with the media

Media Experiences & Case Studies

• Understand how the internet and social media can raise awareness, profile and spread their message

Communication Means

• All outlets – press, TV, Radio, Social Media
• How do they function and what do they want?
• What is a crisis in your world?
• Media training on the media crisis
• How does you organisation manage a crisis – including leadership policy and typical procedures?
• What can you prepare for a crisis?
• How to implement policies and procedures (who should announce first? Who should raise the flag? and what is the best crisis reporting path?)

The News Story

• Explain what makes a news story and what journalists are looking for
• Working with the media needs during a crisis
• The demands of 24/7 News and timely responses
• National and international media
• Understanding the needs of the Media – how do you fulfil those

Developing Media Strategy

• How to develop a strategy which works across all media outlets
• Cyber Incident – contingency plans for communications when a cyber-attack happens
• Disaster Management in Cyber security

Types of Media Interviews

Holding Statements

• What is a Holding Statement and how to write one
• Prepare a Crisis Media Strategy with holding statements in order to be prepared if a crisis or disaster occurs

Introduction to Interviews

• Types of interviews
• Why are you doing an interview?
• What you can and can’t say during a crisis
• How to prepare for an interview
• Worst question and best answer!
• Planning your media strategy

Key Messaging

• The role of key messages during your crisis

Responding to the Media

• How to develop the key messages during your crisis, using real cyber incidents

Body Language

• Using body language to good effect
• The importance of nonverbal communication in a crisis

Working with Broadcast Media

• Setting up a Press Conference
• How to navigate it successfully
• The dos and don’ts of holding a press conference

Briefing your Media Spokesperson

• How to brief your boss if they are going to speak to the
• Media
• What key things will they need to know?
• Door-stopping

Working with Social Media

• How to get your message out across all platforms

Listening to Social Media

• The importance of monitoring social media “chatter”
• The impact on your reputation
• Beyond Borders – looking at what the International
• Media is saying and the impact on you and your
• Reputation
• Illustrating different methods/tools or ways to measure a crisis
• How to listen on different social media channels/websites/media outlets
• Overview of methodologies to determining crisis impact.