📚 New FREE Course: Learn the fundamentals of Lean Six Sigma with our White Belt Essentials e-learning. Click here to access.
- Ask a Question
- Bookmark
- Share
- prev
- next
Short Workshop | Max. 12 Participants
2 hours
Workshop Outcomes
- Confidence that your existing crisis leadership skills apply and clarity on what makes a cyber crisis different
- Shared language and clear roles for executive decision-making under pressure
- Ability to make sound early decisions when technology and information are uncertain
- Clarity on which regulatory, contractual and insurance obligations apply to your organisation and when the clock starts
- A tested approach to stakeholder communication and Board escalation
- Gaps in current plans identified with priority actions
Topics Covered
- The executive role in a cyber crisis: protecting business outcomes, not fixing the technology
- Fast to fail, slow to know: leading when systems fail in minutes but the facts take days or weeks to emerge
- The first 72 hours: the critical decisions, from shutting down and ransom positions to legal privilege and engaging your insurer
- Regulatory clocks: notifiable data breaches, ransomware payment reporting and contractual obligations, and who owns them
- Communicating with confidence: staff, customers, partners, regulators and media, including when your usual channels can’t be trusted
- Briefing and escalating to the Board: when, how and what they need to know
Location
- Willing to work remote
- Willing to work interstate
- Willing to work internationally
How can this workshop be delivered?
- Face to face
Overview
When technology fails, executives are not there to fix it. Their role is to protect business outcomes, meet regulatory obligations and communicate with confidence while information is incomplete and the clock is running.
This practical workshop puts your executive team through a realistic cyber crisis, built around the decisions that matter: when to shut down, whether to pay, who to notify, what to tell staff, customers and the media and when to brief the Board.
Before the session, a fine-tuning conversation identifies your regulatory profile and selects one of four contemporary scenarios: ransomware and data extortion, third-party compromise, material technology outage or Artificial Intelligence (AI) enabled impersonation fraud.
After the session, you receive observations note written for directors and officers, with priority actions to strengthen your crisis readiness.
The first in a three-part series building executive and Board muscle memory.
Workshop Outcomes
- Confidence that your existing crisis leadership skills apply and clarity on what makes a cyber crisis different
- Shared language and clear roles for executive decision-making under pressure
- Ability to make sound early decisions when technology and information are uncertain
- Clarity on which regulatory, contractual and insurance obligations apply to your organisation and when the clock starts
- A tested approach to stakeholder communication and Board escalation
- Gaps in current plans identified with priority actions
Topics Covered
- The executive role in a cyber crisis: protecting business outcomes, not fixing the technology
- Fast to fail, slow to know: leading when systems fail in minutes but the facts take days or weeks to emerge
- The first 72 hours: the critical decisions, from shutting down and ransom positions to legal privilege and engaging your insurer
- Regulatory clocks: notifiable data breaches, ransomware payment reporting and contractual obligations, and who owns them
- Communicating with confidence: staff, customers, partners, regulators and media, including when your usual channels can’t be trusted
- Briefing and escalating to the Board: when, how and what they need to know
Who is this workshop for
Executive and senior leadership teams of all types and sizes of organisation: small and family businesses, not-for-profits and medium to large organisations. No technical background is needed. This workshop is about leadership, not technology.
Organisations with sector-specific obligations, such as APRA-regulated entities or critical infrastructure under the SOCI Act, can have the scenario and regulatory content tailored to their context.
Handouts/materials provided
“First 72 Hours: Executive Decision Checklist”, scenario materials on the day and post-session observations note with priority actions.
What to bring
Your existing incident response, business continuity and crisis communication plans and a summary of your cyber insurance policy, including the insurer’s incident contact. If you can’t find them quickly, that’s the first lesson.
Facilitator
About the facilitator
Jason Wilk is a senior facilitator and course author specialising in governance, strategy and cyber risk education for directors and senior executives. He delivers governance education nationally and contributes to the development and review of strategy and risk curricula. Since 2017, he has authored courses on cyber governance for directors and recently developed a Digital Governance Masterclass covering Artificial Intelligence (AI) and automated decision-making governance for non-technical leaders.
He brings 15 years of experience leading a boutique governance, strategy and risk consultancy, delivering several hundred advisory engagements across diverse industries, organisation sizes and sectors, including government. His work includes leading the development of the Public Sector Commission’s Good Governance Guide and reviewing governance structures across numerous Western Australian state agencies.
Previously, Jason served as a Chief Information Security Officer within financial institutions. His expertise sits at the intersection of governance education, strategic advisory and board directorship, with a particular focus on strengthening organisational governance, managing risk and supporting effective decision-making.
Key Expertise
- Governance
- Strategy
- Cyber Risk
- Technology governance
- Cyber in the Boardroom
Industry Focus
- Government
- Not-for-Profit (NFP)
- Small and Medium-sized Enterprises (SMEs)
Based in:
About the facilitator
Jason Wilk is a senior facilitator and course author specialising in governance, strategy and cyber risk education for directors and senior executives. He delivers governance education nationally and contributes to the development and review of strategy and risk curricula. Since 2017, he has authored courses on cyber governance for directors and recently developed a Digital Governance Masterclass covering Artificial Intelligence (AI) and automated decision-making governance for non-technical leaders.
He brings 15 years of experience leading a boutique governance, strategy and risk consultancy, delivering several hundred advisory engagements across diverse industries, organisation sizes and sectors, including government. His work includes leading the development of the Public Sector Commission’s Good Governance Guide and reviewing governance structures across numerous Western Australian state agencies.
Previously, Jason served as a Chief Information Security Officer within financial institutions. His expertise sits at the intersection of governance education, strategic advisory and board directorship, with a particular focus on strengthening organisational governance, managing risk and supporting effective decision-making.
Key Expertise
- Governance
- Strategy
- Cyber Risk
- Technology governance
- Cyber in the Boardroom
Industry Focus
- Government
- Not-for-Profit (NFP)
- Small and Medium-sized Enterprises (SMEs)
Based in:
Contact Us
Can’t find what you need? For more information or a customised solution for your organisation, simply fill out the form below, we will be in touch with you shortly.