Crisis Response

The right legal adviser can be pivotal to effectively managing and containing issues like cyber incidents and thinking ahead before a crisis hits: this is as much about prevention as cure.

We have assisted clients with investigations surrounding the circumstances of a hack or serious cyber incident in which our swift intervention and analysis of the facts meant that there was no need to notify either their customers or regulators. As a result, these instances remain out of the public domain. We worked closely with the client teams to reach a final resolution that didn’t damage their reputation and avoided any form of litigation.

We are also experienced in situations where both regulators and customers have had to be notified of a breach or incident. In these cases, we have provided full support and advice on who to tell about the breach and when. This ensured that information become public knowledge only when absolutely necessary, in a manner that ensured the story was carefully and consistently messaged. 

In the event of a potential breach, our team is able to:

• act as the core custodian of the facts (typically under legal privilege)
• ensure the right information is available to decision makers, including valuable cyber threat intelligence before an incident occurs
• ensure an accurate and consistent narrative is provided throughout by PR and communications representatives
• support and assist with any internal investigations
• advise on securing and recovering data, including by unorthodox means
• provide necessary legal advice as to the board and management’s reporting responsibilities with an eye to collateral impacts (for example in updating markets)
• liaise with relevant regulators and law enforcement officials across multiple jurisdictions
• advise on dealing with potential claims

Prepare and Recover

Our team can also assist with putting in place governance and training to help reduce the impact of cyber incidents by:

• advising on effective incident response planning and testing, based on our experience in major incidents
• delivering board level scenario training and wider organisational training
• assisting with effective vendor risk management including designing procurement and audit processes
• advising on wider privacy compliance issues