knowledge

When a cyber incident strikes, attention tends to focus on systems and recovery. Yet communication largely determines how a crisis unfolds. In the CCRC podcast, Kelvin Rorive spoke with Koen van Tankeren, who has been advising organisations on spokesmanship and crisis communication for more than twenty years. They discussed what to say when you still

​Today in The Hague, the manifesto 'Samen sneller dan de dreiging' (Together faster than the threat) was presented to Willemijn Aerdts, State Secretary for Digital Economy and Sovereignty. CCRC is one of the signatories. With this, we join Prometheus, a public-private initiative under the banner of Digital Holland that is building a collective digital defence

Imagine a room full of CISOs, security managers and crisis specialists. You hand them a realistic data breach scenario, a ticking clock and the assignment to find their way through it together. What would you expect? Probably this: debate about forensic investigation, discussion about detection technology, disagreements about incident response tooling. What actually happened at

Hans van der Net has worked at Rabobank for sixteen years and has spent most of that time operating at the intersection of IT and business. In his current role he wears two hats: he's responsible for security strategy and policy, and he also serves as Deputy CISO. That combination keeps him sharp, because policy

According to Martin Koopmans, cyber crisis readiness is not about detailed playbooks or theoretical scenarios, but about something far more practical: knowing what to do when things go wrong and having genuinely practised it. “No two crises are the same. But if you practise, you at least know who is responsible for what, how the

Martin de Vries is CISO at VDL. Before that, he held the same role at Eindhoven University of Technology (TU/e), where he experienced up close how a cyber crisis can turn an organisation upside down in an instant. In this interview, Martin shares what crisis exercises actually mean when it’s real. How practising ensures you

A cyber crisis rarely announces itself neatly. There’s no starting gun, and almost never immediate, complete clarity. There’s a report, a suspicion, a few signals that don’t add up. And meanwhile, everyone is looking at the same people in the organization with one expectation: take control and fix it. According to Cees Berrens, that is

Jochem Smit is a Senior Crisis Management Trainer at CCRC and brings hands-on experience from real ransomware incidents. At Northwave, he was one of four senior crisis managers responding to major cyber incidents. “They were all ransomware cases.” In those situations, an organization’s infrastructure is partly or completely down. Companies, often via their insurer, quickly

Jelle Niemantsverdriet is a Senior Crisis Management Trainer at CCRC, with more than twenty years of experience in cybersecurity and incident response. He has worked at Fox-IT, Verizon, Deloitte, and Microsoft, helping organizations respond to incidents and build crisis management capabilities. In this interview, he explains where teams often stumble, what makes an exercise truly

​Chris van ‘t Hof, as director of DIVD, is used to seeing vulnerabilities before they become incidents. But in CCRC crisis training, he sits on the other side of the spectrum: there he sees what happens once things do go wrong and how quickly a technical problem turns into a management stress test. He writes