Operations, personal data and financial estimates offer different views of this incident. The readiness question: how do you coordinate service delivery as the available information changes?
Guest service and decisions
INSIGHTS
Cyber Crisis Readiness Intelligence Centre
CLEARER INSIGHT.
BETTER DECISIONS.
Documented public incidents, themes and analysis on cyber crisis readiness. Accessible sources, figures in context and questions for the decision-making table.
Featured · Jaguar Land Rover · 2025
Disruption reaches beyond the business.
Restart, reported costs, supply-chain estimates and financing: four dimensions that need to be understood on their own terms.
Public cyber incident analysis. Not a CyberUP client reference.
Incident analyses · Sources included
Public cyber incident analyses.
Six analyses of decisions, dependencies and consequences. Each distinguishes documented facts, estimates and CyberUP’s operational interpretation.
The organisations discussed were involved in public incidents. These analyses do not represent CyberUP clients, engagements or references.
This case separates three measures that are often conflated: service recovery, people affected by the breach and financial impact. Each has its own scope and date.
Dependencies and workflow continuity
An attack on IT systems, a precautionary operational shutdown and a staged restart. This case makes the distinction between containment and operational continuity tangible.
IT, operations and restart
Affected data, service continuity and the provenance of information. An analysis that keeps the bank’s disclosures distinct from figures circulated by attackers.
Data, third parties and communications
Three reports from June 2026 distinguish official statements, customer accounts and continuing disruption. They do not provide a complete forensic reconstruction.
Service status and communications
The phased restart, reported costs and modelled economic impact describe different dimensions of the incident. Reading them together does not mean adding them together.
Production, suppliers and liquidity
No cases match your search.
Try another organisation, year or topic.
Six complementary perspectives
READ TO
DECIDE.
Choose a topic and explore the relevant CyberUP pages. These routes lead to the model, capabilities and exercise environments: they are not articles or published case analyses.
6 topics available
Explore a topic
Business continuity, preparedness, resilience, governance and improvement. What to observe in an organisation’s response.
Related CyberUP page
Explore a topic
Scenario design, Cyber Arena, exercise control and debrief. Connecting objectives with what can be observed.
Related CyberUP page
Explore a topic
The board, accountabilities, Legal, Communications and decisions under pressure. Connecting leadership with the operational response.
Related CyberUP page
Explore a topic
IT / OT / ICS, control rooms, cyber-physical risk and mission continuity. Understanding systems and processes together.
Related CyberUP page
Explore a topic
The operational, decision-making and reputational impact of an incident. A perspective on technical response and coordination.
Related CyberUP page
Explore a topic
Frameworks and criteria for observing readiness. Distinguishing knowledge, behaviours and evidence before discussing scores.
Related CyberUP page
No topics match your search.
Try a broader term or remove the selected filter.
Sources and further exploration
Go deeper. Keep the context.
The incident analyses cite external sources and distinguish incident information from CyberUP exercise proposals. The topic routes above lead to pages explaining the model and capabilities.
Open access. No registration.
All six analyses are available in this collection, without providing contact details. The collection does not include additional downloadable guides or checklists; every resource linked here is available to read.
Our editorial approach
LESS NOISE.
MORE SIGNAL.
Every piece should help you understand a risk, make a decision, design an exercise or strengthen a capability. The value is not in publishing more. It is in making what matters clearer.
- Signal
Identify what is changing.
Threats, incidents, dependencies and new operational pressures: what deserves attention?
- Context
Understand why it matters.
The impact on people, processes, decisions, systems and operational continuity.
- Action
Connect insight with preparation.
Questions, criteria and exercises that make the response observable.
Readiness questions
REAL QUESTIONS.
USEFUL ANSWERS.
Definitions and distinctions to guide your assessment, with links to pages that explain the detail.
What is Cyber Crisis Readiness?
It is an organisation’s preparedness to manage a cyber crisis when prevention is not enough, combining technical capabilities, processes, people and decisions. The aim is to test the response and guide improvement, not to guarantee the outcome of a real incident.
Explore Cyber Crisis ReadinessAre Cyber Arena and a cyber range the same thing?
CyberUP connects technical exercises with the organisational response, involving the functions and systems relevant to the scenario. Scope differs between the dedicated Physical and Smart solutions and the generic environments of the Training Arena. Comparisons should address the individual configuration, not assume that all cyber ranges share the same limitations.
Compare Arena solutionsHow is readiness measured?
Through a baseline, observation of the response and evidence generated during exercises. The CyberUP method is Assess → Simulate → Measure → Improve. Cyber DNA is a framework under methodological development, not a definitive score, ranking or certification.
Explore the Cyber DNA frameworkWho should take part in a cyber crisis exercise?
That depends on the scenario and objectives. Participants may include Cyber/SOC, IT, OT / ICS, Operations, senior executives, the Crisis Team, Legal, Communications and other functions relevant to continuity. The programme defines participants, responsibilities and activation conditions; there is no universal order or timetable.
Explore capabilities and rolesFrom insight to conversation
INSIGHT MATTERS
WHEN IT CHANGES THE RESPONSE.
When an analysis raises a practical question about your organisation’s readiness, continue the conversation with the CyberUP team.