Uploaded December 2025 | Updated September 2026, 2 hours ago
This PRCA Fuse Podcast episode dives into what really happens when organisations are hit by a major cyber attack, from the first shocking ransomware message to the long tail of operational and reputational damage. Host Adrian Ma speaks with cyber crisis experts Joanne Gill and Jason Nisse about why cyber incidents are long-form crises, why so many crisis plans fail once email and core systems go down, and what offline readiness really looks like in practice. Drawing on real-world examples including M&S, Jaguar Land Rover, Harrods, Co-op and Asahi Breweries, they explore the risks of communication voids, the limits of cyber insurance, the importance of choosing the right spokesperson, and how realistic tabletop exercises can expose dangerous blind spots before an attack hits.
00:00 Ransomware voicemail – a real-world scenario
01:05 Introducing the guests and their backgrounds
03:40 Big-name cyber attacks and their impact (M&S, JLR, Asahi)
06:20 How prepared are companies really?
08:10 The first 24 hours: confusion, chaos and loss of systems
09:40 Offline readiness: pen, paper and physical crisis plans
13:20 Common mistakes and paralysis in cyber crises
17:20 Cyber insurance: what it helps with – and what it doesn’t
23:10 Who’s done it better? Lessons from retailers’ media coverage
25:35 Managing tension between engineers, legal and comms
27:15 Tabletop exercises: how they work and what teams learn
This PRCA Fuse Podcast episode dives into what really happens when organisations are hit by a major cyber attack, from the first shocking ransomware message to the long tail of operational and reputational damage. Host Adrian Ma speaks with cyber crisis experts Joanne Gill and Jason Nisse about why cyber incidents are long-form crises, why so many crisis plans fail once email and core systems go down, and what offline readiness really looks like in practice. Drawing on real-world examples including M&S, Jaguar Land Rover, Harrods, Co-op and Asahi Breweries, they explore the risks of communication voids, the limits of cyber insurance, the importance of choosing the right spokesperson, and how realistic tabletop exercises can expose dangerous blind spots before an attack hits.
00:00 Ransomware voicemail – a real-world scenario
01:05 Introducing the guests and their backgrounds
03:40 Big-name cyber attacks and their impact (M&S, JLR, Asahi)
06:20 How prepared are companies really?
08:10 The first 24 hours: confusion, chaos and loss of systems
09:40 Offline readiness: pen, paper and physical crisis plans
13:20 Common mistakes and paralysis in cyber crises
17:20 Cyber insurance: what it helps with – and what it doesn’t
23:10 Who’s done it better? Lessons from retailers’ media coverage
25:35 Managing tension between engineers, legal and comms
27:15 Tabletop exercises: how they work and what teams learn
