Kira Groß-Bölting
Florian Kuckelkorn
Michael Sjøberg A cyberattack rarely begins where companies expect it to. It not only affects networks and systems, but above all puts the organization to the test: Who makes the decisions in an emergency? Who is available at night? And who has the courage to take drastic action?

Using a real-life case study, this presentation shows why technical expertise alone is not enough. Resilient crisis management is becoming increasingly important. When a company first detected signs of an active attack, the recommendation was clear: disconnect from the internet. It took over three hours for this decision to be made—not because of inaction, but because there was no clear escalation plan in place.

As the situation unfolded, it became clear ...