Marloes van Vliet

Imagine a room full of CISOs, security managers and crisis specialists. You hand them a realistic data breach scenario, a ticking clock and the assignment to find their way through it together. What would you expect? Probably this: debate about forensic investigation, discussion about detection technology, disagreements about incident response tooling. What actually happened at […]

Hans van der Net has worked at Rabobank for sixteen years and has spent most of that time operating at the intersection of IT and business. In his current role he wears two hats: he's responsible for security strategy and policy, and he also serves as Deputy CISO. That combination keeps him sharp, because policy

According to Martin Koopmans, cyber crisis readiness is not about detailed playbooks or theoretical scenarios, but about something far more practical: knowing what to do when things go wrong and having genuinely practised it. “No two crises are the same. But if you practise, you at least know who is responsible for what, how the

Martin de Vries is CISO at VDL. Before that, he held the same role at Eindhoven University of Technology (TU/e), where he experienced up close how a cyber crisis can turn an organisation upside down in an instant. In this interview, Martin shares what crisis exercises actually mean when it’s real. How practising ensures you

A cyber crisis rarely announces itself neatly. There’s no starting gun, and almost never immediate, complete clarity. There’s a report, a suspicion, a few signals that don’t add up. And meanwhile, everyone is looking at the same people in the organization with one expectation: take control and fix it. According to Cees Berrens, that is

Jochem Smit is a Senior Crisis Management Trainer at CCRC and brings hands-on experience from real ransomware incidents. At Northwave, he was one of four senior crisis managers responding to major cyber incidents. “They were all ransomware cases.” In those situations, an organization’s infrastructure is partly or completely down. Companies, often via their insurer, quickly