Stephen Dunn is a cybersecurity and technology leader who has spent his career translating complex technical challenges into clear business solutions, working with boards, senior leadership teams, and non-technical managers across a range of industries. A full member of the Chartered Institute of Information Security and CISSP certified, Stephen is a regular speaker on cybersecurity topics and a STEM Ambassador. Preparing for and Dealing with Cyber Threats is his first book.

• Chapter 1: Understanding the cyber threat landscapeThis is a general introduction to the book, giving some general background and explain what the book hopes to achieve.Chapter 2: What cyber incidents actually areThis chapter talks about the most common types of cyber incidents in a non-technical manner to provide a foundation for the rest of the book. It also introduces some of the more common concepts such as the “cascade effect” where attacks can flow from each other.Chapter 3: Recognising incidents when they happenThis chapter teaches the reader some practical identification skills to help differentiate actual attacks from normal IT issues and staff behaviour. It introduces some quick decision-making frameworks to help the reader practically.Chapter 4: Preparing your business before an incident occursThis chapter shifts from prevention and detection to preparation, with more practical advice to be prepared for an attack. A 90-day implementation plan and testing approaches ensure sustainable readiness.Chapter 5: What to do in the first hourThis is the practical section designed to be referred to during a crisis. It contains practical guidance and will be supported by checklists, showing leaders how to avoid impulsive mistakes such as restoring systems prematurely, staying silent or rushing communications. Leaders learn to prioritise facts over assumptions, focus on limiting damage, and communicate clearly.Chapter 6: Coordinating a full incident responseAs incidents extend beyond the first hour, leadership becomes about coordination rather than personal heroics. Clear frameworks ensure that external specialists serve the business rather than inadvertently taking control.Chapter 7: Communicating under pressureCommunication failures can sink incident response faster than technical issues. This chapter equips leaders with strategies for internal updates, regulatory notifications, and customer messaging. Leaders learn to acknowledge uncertainty without damaging trust, balance compliance with business messaging, and maintain stakeholder confidence.Chapter 8: Recovery and return to normalRecovery is often misjudged as simple system restoration, but this chapter reframes it as an opportunity for transformation. Businesses are urged to treat recovery as strategic investment, not cost.Chapter 9: Learning and strengthening defencesOnce systems are restored, the real value lies in learning. This chapter emphasises that incidents provide unique, high-stakes insights into business operations, team performance and stakeholder relationships.Chapter 10: The transferable frameworkThis chapter shows how incident-tested skills, structured decision making, communication under pressure and coordinated leadership are transferable to every aspect of business. By leveraging lessons learned, businesses can convert cyber incidents into permanent competitive advantages.Chapter 11: Building long-term resilienceThis final chapter reveals how all of the previous learnings can build long-term resilience in a firm, and how to leverage that for future incidents.AppendicesIncluding a digital emergency kit and communication templates.

Stephen Dunn is a cybersecurity and technology leader who has spent his career translating complex technical challenges into clear business solutions, working with boards, senior leadership teams, and non-technical managers across a range of industries. A full member of the Chartered Institute of Information Security and CISSP certified, Stephen is a regular speaker on cybersecurity topics and a STEM Ambassador. Preparing for and Dealing with Cyber Threats is his first book.

• Chapter 1: Understanding the cyber threat landscapeThis is a general introduction to the book, giving some general background and explain what the book hopes to achieve.Chapter 2: What cyber incidents actually areThis chapter talks about the most common types of cyber incidents in a non-technical manner to provide a foundation for the rest of the book. It also introduces some of the more common concepts such as the “cascade effect” where attacks can flow from each other.Chapter 3: Recognising incidents when they happenThis chapter teaches the reader some practical identification skills to help differentiate actual attacks from normal IT issues and staff behaviour. It introduces some quick decision-making frameworks to help the reader practically.Chapter 4: Preparing your business before an incident occursThis chapter shifts from prevention and detection to preparation, with more practical advice to be prepared for an attack. A 90-day implementation plan and testing approaches ensure sustainable readiness.Chapter 5: What to do in the first hourThis is the practical section designed to be referred to during a crisis. It contains practical guidance and will be supported by checklists, showing leaders how to avoid impulsive mistakes such as restoring systems prematurely, staying silent or rushing communications. Leaders learn to prioritise facts over assumptions, focus on limiting damage, and communicate clearly.Chapter 6: Coordinating a full incident responseAs incidents extend beyond the first hour, leadership becomes about coordination rather than personal heroics. Clear frameworks ensure that external specialists serve the business rather than inadvertently taking control.Chapter 7: Communicating under pressureCommunication failures can sink incident response faster than technical issues. This chapter equips leaders with strategies for internal updates, regulatory notifications, and customer messaging. Leaders learn to acknowledge uncertainty without damaging trust, balance compliance with business messaging, and maintain stakeholder confidence.Chapter 8: Recovery and return to normalRecovery is often misjudged as simple system restoration, but this chapter reframes it as an opportunity for transformation. Businesses are urged to treat recovery as strategic investment, not cost.Chapter 9: Learning and strengthening defencesOnce systems are restored, the real value lies in learning. This chapter emphasises that incidents provide unique, high-stakes insights into business operations, team performance and stakeholder relationships.Chapter 10: The transferable frameworkThis chapter shows how incident-tested skills, structured decision making, communication under pressure and coordinated leadership are transferable to every aspect of business. By leveraging lessons learned, businesses can convert cyber incidents into permanent competitive advantages.Chapter 11: Building long-term resilienceThis final chapter reveals how all of the previous learnings can build long-term resilience in a firm, and how to leverage that for future incidents.AppendicesIncluding a digital emergency kit and communication templates.

Stephen Dunn is a cybersecurity and technology leader who has spent his career translating complex technical challenges into clear business solutions, working with boards, senior leadership teams, and non-technical managers across a range of industries. A full member of the Chartered Institute of Information Security and CISSP certified, Stephen is a regular speaker on cybersecurity topics and a STEM Ambassador. Preparing for and Dealing with Cyber Threats is his first book.

• Chapter 1: Understanding the cyber threat landscapeThis is a general introduction to the book, giving some general background and explain what the book hopes to achieve.Chapter 2: What cyber incidents actually areThis chapter talks about the most common types of cyber incidents in a non-technical manner to provide a foundation for the rest of the book. It also introduces some of the more common concepts such as the “cascade effect” where attacks can flow from each other.Chapter 3: Recognising incidents when they happenThis chapter teaches the reader some practical identification skills to help differentiate actual attacks from normal IT issues and staff behaviour. It introduces some quick decision-making frameworks to help the reader practically.Chapter 4: Preparing your business before an incident occursThis chapter shifts from prevention and detection to preparation, with more practical advice to be prepared for an attack. A 90-day implementation plan and testing approaches ensure sustainable readiness.Chapter 5: What to do in the first hourThis is the practical section designed to be referred to during a crisis. It contains practical guidance and will be supported by checklists, showing leaders how to avoid impulsive mistakes such as restoring systems prematurely, staying silent or rushing communications. Leaders learn to prioritise facts over assumptions, focus on limiting damage, and communicate clearly.Chapter 6: Coordinating a full incident responseAs incidents extend beyond the first hour, leadership becomes about coordination rather than personal heroics. Clear frameworks ensure that external specialists serve the business rather than inadvertently taking control.Chapter 7: Communicating under pressureCommunication failures can sink incident response faster than technical issues. This chapter equips leaders with strategies for internal updates, regulatory notifications, and customer messaging. Leaders learn to acknowledge uncertainty without damaging trust, balance compliance with business messaging, and maintain stakeholder confidence.Chapter 8: Recovery and return to normalRecovery is often misjudged as simple system restoration, but this chapter reframes it as an opportunity for transformation. Businesses are urged to treat recovery as strategic investment, not cost.Chapter 9: Learning and strengthening defencesOnce systems are restored, the real value lies in learning. This chapter emphasises that incidents provide unique, high-stakes insights into business operations, team performance and stakeholder relationships.Chapter 10: The transferable frameworkThis chapter shows how incident-tested skills, structured decision making, communication under pressure and coordinated leadership are transferable to every aspect of business. By leveraging lessons learned, businesses can convert cyber incidents into permanent competitive advantages.Chapter 11: Building long-term resilienceThis final chapter reveals how all of the previous learnings can build long-term resilience in a firm, and how to leverage that for future incidents.AppendicesIncluding a digital emergency kit and communication templates.