Preparing for and Dealing with Cyber Threats

Stephen Dunn has worked exclusively within small and medium-sized businesses for his whole career, whilst also working within the charity sector as a non-exec director. He holds a CISSP, the premier cybersecurity certification, and has created and managed cybersecurity programmes in SMEs. He is also a full member of the Chartered Institute of Information Security.Stephen has advised the Scottish Qualifications Authority on content for the new college course curriculum for computer science as a business liaison representative, to ensure the curriculum is relevant to what businesses need from graduates. He is also a STEM ambassador and gives talks on cybersecurity at schools for parents and pupils.

• Chapter 1: Understanding the cyber threat landscapeThis is a general introduction to the book, giving some general background and explain what the book hopes to achieve.Chapter 2: What cyber incidents actually areThis chapter talks about the most common types of cyber incidents in a non-technical manner to provide a foundation for the rest of the book. It also introduces some of the more common concepts such as the “cascade effect” where attacks can flow from each other.Chapter 3: Recognising incidents when they happenThis chapter teaches the reader some practical identification skills to help differentiate actual attacks from normal IT issues and staff behaviour. It introduces some quick decision-making frameworks to help the reader practically.Chapter 4: Preparing your business before an incident occursThis chapter shifts from prevention and detection to preparation, with more practical advice to be prepared for an attack. A 90-day implementation plan and testing approaches ensure sustainable readiness.Chapter 5: What to do in the first hourThis is the practical section designed to be referred to during a crisis. It contains practical guidance and will be supported by checklists, showing leaders how to avoid impulsive mistakes such as restoring systems prematurely, staying silent or rushing communications. Leaders learn to prioritise facts over assumptions, focus on limiting damage, and communicate clearly.Chapter 6: Coordinating a full incident responseAs incidents extend beyond the first hour, leadership becomes about coordination rather than personal heroics. Clear frameworks ensure that external specialists serve the business rather than inadvertently taking control.Chapter 7: Communicating under pressureCommunication failures can sink incident response faster than technical issues. This chapter equips leaders with strategies for internal updates, regulatory notifications, and customer messaging. Leaders learn to acknowledge uncertainty without damaging trust, balance compliance with business messaging, and maintain stakeholder confidence.Chapter 8: Recovery and return to normalRecovery is often misjudged as simple system restoration, but this chapter reframes it as an opportunity for transformation. Businesses are urged to treat recovery as strategic investment, not cost.Chapter 9: Learning and strengthening defencesOnce systems are restored, the real value lies in learning. This chapter emphasises that incidents provide unique, high-stakes insights into business operations, team performance and stakeholder relationships.Chapter 10: The transferable frameworkThis chapter shows how incident-tested skills, structured decision making, communication under pressure and coordinated leadership are transferable to every aspect of business. By leveraging lessons learned, businesses can convert cyber incidents into permanent competitive advantages.Chapter 11: Building long-term resilienceThis final chapter reveals how all of the previous learnings can build long-term resilience in a firm, and how to leverage that for future incidents.AppendicesIncluding a digital emergency kit and communication templates.