Crisis Solutions process
Use this guided process to keep the crisis meeting focused, confirm the operating picture, agree priorities, control communications and set the next review rhythm.
Cyber Incident
A suspected cyber incident is affecting access to customer-facing systems. Technical teams are investigating the scope of the incident and whether customer data may have been accessed.
Step 1
What has changed since the last review? What new facts have emerged? What has escalated, reduced, completed or become urgent?
Current position
Cyber Incident at Acme Bank – Active Investigation and Service Impact: Situation overview: Acme Bank is managing a suspected cyber incident currently affecting access to customer-facing systems. Technical teams are actively investigating the scope,...
Step 2
What has happened, what is the practical impact, who is affected and what has changed from normal operations?
Current position
Impact: The suspected cyber incident is currently restricting customer access to online banking services, preventing customers from conducting transactions, checking accounts, or engaging...
Step 3
What does successful resolution look like? Is the Strategic Intent still valid and clear enough to communicate to other response teams?
Current position
Strategic Intent: Our strategic intent is to protect customer data, contain the threat, maintain confidence with customers and regulators, and restore services only when we are confident they are se...
Step 4
What do we know, what do we not know, what assumptions are we making and what risks may emerge?
Current position
2 active information items. The specific details, rationale, and impact of the additional approved decision labeled 'cvb' are unknown and require clarification.
Step 5
What must be done now, who owns it, and what decisions are needed from the crisis team before the next review?
Current position
2 urgent open actions. 3 decisions not marked complete.
Step 6
Who needs to know what, by when, and who owns the communication? Are any communications overdue or approaching deadline?
Current position
3 active communications. Crisis Management Team and Leadership: Clarification of the approved additional decision labeled 'cvb', including specifics and rationale, to ensure aligned response actions and consistent messaging
Step 7
When will the team meet again, what must be ready by then, and what review rhythm is needed?
Current review schedule
Next review: No next review time has been set.
Rhythm: No review rhythm has been set.
When the meeting has completed this review, return to the live crisis dashboard to manage the ongoing incident.