Guidance
How to prepare for and plan your organisation's response to severe cyber threat: a guide for CNI
Act now to be ready to withstand and recover from severe cyber attacks.
Pages
Page 3 of 26
1.1 Why you should plan and prepare early and extensively
The time to prepare is now. Reacting when crisis arrives will not be enough. The organisations that respond best to a change in threat are the ones that put steps in place now, because:
- risk decisions can be made in advance with cool heads and ample time to find the relevant information.
- existing systems can be adapted to make it quicker and easier to make changes, and new systems can be designed with different security postures in mind.
- there is plenty of time to identify and solve barriers to making the required changes.
- changes to ways of working can be tested, communicated, and practised.