Cyber crisis: when the board is told too late
A cyber crisis can blow up not because of the hack, but because the board hears about it too late. What it needs to receive, when, and in what format.
In FrenchField notes from the practice.
How we think about cyber risk, governance and crisis prep. Written for the boards and executive teams that own the risk.
VIDEO CAPSULES
What if it were tomorrow?
A series of short capsules on cyber risk, governance and crisis preparation. Two minutes per topic, made for boards and executive committees.
AI: beyond training the data
"Does my vendor train its model on our data?" is no longer enough. Gartner expects that by 2027, over 40% of AI-related breaches will come from misuse.
In FrenchThe risk of shadow AI inside the company
Shadow IT hid tools. Shadow AI also hides data: contracts, internal notes, HR files. Microsoft counts 78% of users bringing their own tools to work.
In FrenchAdopting AI without a framework: the risk
88% of organisations already use AI, per the Stanford AI Index 2026. Use is moving faster than governance, and Europe has already started regulating.
In FrenchPhishing: being ready, not just protected
An attack rarely starts with something technical. It starts with a credible email, and what matters next is knowing who to escalate to without losing time.
In FrenchCyber resilience: from strategy to action
Cyber resilience starts long before the attack, at the level of strategy. What it takes to turn that into governance, a response plan and crisis drills.
In FrenchWhat if it were tomorrow?
The series opener and the five themes it covers: everyday risks, suppliers and dependencies, crisis and continuity, governance and the board's role, growth and AI.
In FrenchWant to talk through any of this?
Request a 30-minute call. We'll share how we'd approach the same problem at your organization.
Request a call