Cyber Security Crisis Management: Why AI threats demand whole-of-business preparedness
Adoni Media Founder Leisa Goddard has warned Australian organisations that cyber breaches are not just an IT issue and leaders must have trained “muscle memory” to successfully respond.
A leader in crisis management, Ms Goddard was speaking at the Cultural Cyber Security (CCS) Symposium in Brisbane which is one of Australia’s leading cybersecurity conferences that brought together global experts in cyber warfare, digital espionage, artificial intelligence and organisational resilience to discuss the rapidly evolving cyber threat landscape.
AI and quantum computing are escalating cyber risk
International cybersecurity expert, retired US Marine Lt Colonel Bill Hagestad, described the current environment as an “unprecedented era of digital warfare,” warning that civilian infrastructure is increasingly being targeted.
With artificial intelligence accelerating cyberattacks, automating phishing campaigns and amplifying disinformation, organisations face both technical breaches and reputational crises.
The message from global experts was clear: businesses must prepare before an attack occurs.
Cyber security is not an IT problem – it’s a leadership issue
With more than 30 years in media and crisis communication, Ms Goddard told the symposium one of the biggest mistakes executives make is treating cyber breaches as purely technical incidents.
“In a crisis, time is critical. In the confusion of ‘fight, flight, or freeze’ executives need a crisis communications plan that guides them through each stage so information can be gathered and decisions made,” Ms Goddard said.
She warned that the common executive response of “No comment” can significantly damage reputation.
“Too many executives think ‘No Comment’ is the answer without realising they are creating a void that allows other people to control the narrative. Worse, they look like they have something to hide.”
Pre-approved holding statements, defined decision-making structures and trained spokespeople are critical to effective cyber breach response.
Crisis simulation training builds ‘muscle memory’
Risk and resilience expert Simon Petie of Escalate Consulting reinforced the importance of rehearsal and stress testing.
He said crisis preparedness must go beyond written policies.
Organisations that regularly simulate cyber incidents:
- Clarify leadership roles
- Strengthen governance frameworks
- Improve decision-making under pressure
- Reduce panic during live incidents
By practising crisis response, leaders develop “muscle memory,” enabling them to override natural stress responses and respond strategically rather than emotionally.
Ms Goddard agreed: “Crisis simulation training allows teams to experience the pressure of a live incident in a controlled environment, equipping them to respond strategically rather than emotionally.”
Legal risk: Why lawyers must be engaged immediately
Lawyer Ben Warren of Ellam Warren Napa Lawyers stressed the importance of engaging legal experts as soon as a cyber breach occurs.
He warned that governance failures, delayed responses and poor documentation can significantly increase regulatory exposure and litigation risk.
The consensus: Do the work now – not when headlines hit.
People and culture: The first line of cyber defence
Organisation psychologist Dr James Carlopio reinforced that cyber security is fundamentally about people.
“Culture is the first line of cyber defence. A strong cyber safety culture empowers employees to make cyber-safe decisions, recognise threats, and act responsibly with sensitive data.”
He added: “Cyber security is a shared responsibility that requires commitment and vigilance from everyone, every day. Continuous learning and development, combined with a culture of security, empowers everyone to respond effectively to cyber threats.”
The conference heard that 95 per cent of breaches are people-related, yet many organisations under-invest in training and cultural change.
Turning chaos into clarity
The symposium theme, “Beyond the Breach: Turning Chaos into Clarity,” highlighted a central message: Preparation and practice create confidence.
Ms Goddard said organisations that rehearse response procedures, clarify communication strategies and stress-test policies are best positioned to protect both reputation and operational continuity.
“As AI-driven threats grow in scale and speed, the organisations that will survive and thrive are those that prepare before the headlines hit.”
Building business resilience in an AI-driven world
Adoni Media partners with Escalate Consulting to deliver tailored crisis simulation training, media training and business resilience planning for organisations across Australia.
As AI accelerates cyber threats and digital disinformation, crisis communication strategy is no longer optional – it is a core leadership function.
Connect with us via the ‘Contact Us’ button below.
