---
title: Strategies for Surviving a Cyber Attack
description: "Another month, another high-profile attack… or so it seems at the moment. Organisations of all kinds and sizes need to think seriously about cyber security.\n\n\nAs recent incidents at Talk Talk and Equ"
image: https://blog.grantmcgregor.co.uk/hubfs/strategy.jpg
---
[](https://www.grantmcgregor.co.uk/)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
- [Home](https://grantmcgregor.co.uk/)
- About Us
- [Our Story](https://grantmcgregor.co.uk/about-us/our-story)
- [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team)
- [Certifications](https://grantmcgregor.co.uk/about-us/certifications)
- [Careers](https://grantmcgregor.co.uk/about-us/careers)
- IT Support Services
- [IT Support Services](https://grantmcgregor.co.uk/it-support-services)
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
- Professional IT Services
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium)
- [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot)
- [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services)
- [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure)
- [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence)
- [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone)
- [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4)
- [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc)
- [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks)
- Knowledge Hub
- [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies)
- [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories)
- [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast)
- [Client Area](https://grantmcgregor.co.uk/client-area)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
[Contact Us](https://grantmcgregor.co.uk/contact-us)
[Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog)
Business News, Digital Transformation, Cyber Security
# Strategies for Surviving a Cyber Attack
Grant McGregor Team
13 November 2017 • 4 min read
Another month, another high-profile attack… or so it seems at the moment. The latest in the long line was US data firm Equifax – with a breach that affected more than 143 million American consumers. Even if you aren’t holding that much customer data, how do you recover from a breach like that?
Organisations of all kinds and sizes need to think seriously about cyber security.
As recent incidents at Talk Talk and Equifax demonstrate, poor cyber security and poor incident responses can lead to serious reputational damage.
### We All Need to Prepare
If we learnt anything from the WannaCry and NotPetya attacks earlier this year, it is that organisations don’t have to be the target of an attack to fall victim to it. And other reports have also demonstrated that [small businesses are wrong to think they are too small to be a target.](https://www.grantmcgregor.co.uk/2017/youre-not-too-small-to-be-a-victim-the-obvious-it-security-fails-small-businesses-can-avoid/)
**It is important for everyone to have a plan in place.**
Your plan needs to be comprehensive and consider, at a minimum, the following elements:
• Assess your risks and your risk appetite (what does a worst-case scenario look like for your organisation?)
• Ensure appropriate security and monitoring measures are in place (if you're not sure what 'appropriate' means then get above the baseline recommended by the [Cyber Essentials scheme](https://www.grantmcgregor.co.uk/it-software-and-solutions/cyber-essentials/) at the very least)
• Train staff in [cyber awareness skills](https://www.grantmcgregor.co.uk/your-current-security-layers-still-dont-sufficiently-address-your-weakest-link-employees/)to ensure they understand the risks and act accordingly
• Have an appropriate backup regime (and test it)
• Test your security – platform vulnerability and penetration testing
• Develop an incident response plan (and make sure everyone understands their responsibilities, perhaps through drills and test scenarios)
• When suspicious activity is identified, act quickly to contain it
• Execute your incident response plan, including reporting to relevant authorities, and managing the external messaging
• Restore and return to business as usual
• Lessons learned
### Not Only a Technology Issue
It is important to consider not only the technical aspects of your security response plan, but also the “soft skills” involved.
First, [make staff aware of the security risks](https://www.grantmcgregor.co.uk/it-software-and-solutions/gm-cyber-aware/) – for example, educate them about good password management, how to spot a phishing attack, how to recognise suspicious problems with web pages, and how to report any suspicious activity.
You will need to dedicate skilled resources to manage your security monitoring tools, including setting up reports and notifications so you can act swiftly to contain and minimise the effects of any attack.
And, perhaps most importantly, you will need to have a communications plan in place.
One led by IT or your data protection lead that notifies regulatory authorities such as the ICO. A second led by your PR and marketing teams to deal with the press and potential reputational damage. And another led by your customer service teams to ensure customers and other affected stakeholders are kept informed, as required.
### Feeling the Effect of GDPR
GDPR will have a big impact on your communications plan, as it puts increasing onus on organisations to report any data breach swiftly and in full. Not only will you be obliged to notify the regulatory authorities, the Information Commissioners Office (ICO) here in the UK, but also any individuals whose personal data has been compromised during the breach in a way that could affect their rights and freedoms, and any third parties involved.
ICO has warned UK businesses that they need to be prepared to “Tell it all, tell it fast, tell the truth”.
It’s good advice and one that many organisations could learn from… which brings us to the final important aspect of recovery from a data breach – the need to learn the lessons.
### Continual Improvement
Perhaps this is [the most glaring failure of the Equifax story](https://www.theregister.co.uk/2017/09/21/equifax_fooled_again_company_teets_out_links_to_website_parodying_it/); don’t let your organisation share this complacency. If you’ve been targeted once, that does not mean you won’t be targeted again; rather, the reverse.
Take time to learn the lessons, put new tools, practices and policies in place where appropriate, and beef up your monitoring, training, and communication plans.
**If you would like help with any of the issues raised in this article – whether process, policy, planning or technology – the Grant McGregor team can help. Get in touch on 0131 603 7910.**
Photo by Štefan Štefančík on [Unsplash](https://unsplash.com/?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText)
Grant McGregor Team
13 November 2017 • 4 min read
## Recent Posts
### Cyber Security Awareness Month: Why Attackers Still Target the Basics
Learn key cyber security practices for your organisation during Cyber Security Awareness Month. Protect against basic vu...
[Read More](https://blog.grantmcgregor.co.uk/cyber-security-awareness-month)
### Shadow AI: Is Your Business Ready for AI Adoption?
Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w...
[Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption)
### Our Net Zero Target for 2040: What Can We Change?
From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar...
[Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change)
### What Is Penetration Testing? A Guide for Businesses
Learn what penetration testing is, how it works, what the report should include and when your business should consider a...
[Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses)
Union
## Empower your business with secure, expert-led solutions.
Talk to us about people-focused technology that drives results.
[Start a conversation](https://grantmcgregor.co.uk/contact-us)
Premium IT Services Tailored for Leading Brands
[Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT)
Quick Links
- [Home](https://grantmcgregor.co.uk)
- [About us](https://grantmcgregor.co.uk/about-us/our-story)
- [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog)
- [Contact us](https://grantmcgregor.co.uk/contact-us)
Services
- [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support)
- [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service)
- [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services)
- [Cyber Security](https://grantmcgregor.co.uk/cyber-security)
Edinburgh – Chesterfield
[0131 603 7910](tel:+441316037910)
[info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk)
**Main Office:**
The Merchants' Hall,
22 Hanover St,
Edinburgh EH2 2EP
© 2026
Grant McGregor. All rights reserved.
[Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Grant McGregor Team",
"url" : "https://blog.grantmcgregor.co.uk/author/grmc-team"
},
"dateModified" : "2020-05-13T11:09:07.975Z",
"datePublished" : "2017-11-13T07:30:35.000Z",
"headline" : "Strategies for Surviving a Cyber Attack",
"image" : [ "https://blog.grantmcgregor.co.uk/hubfs/strategy.jpg" ],
"mainEntityOfPage" : {
"@id" : "https://blog.grantmcgregor.co.uk/2017/strategies-for-surviving-a-cyber-attack",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg"
},
"name" : "Grant McGregor"
}
}
```
```json
{
"@context" : "https://schema.org",
"@id" : "https://grantmcgregor.co.uk/",
"@type" : "LocalBusiness",
"address" : {
"@type" : "PostalAddress",
"addressCountry" : "GB",
"addressLocality" : "Edinburgh",
"postalCode" : "EH2 2EP",
"streetAddress" : "22 Hanover Street"
},
"geo" : {
"@type" : "GeoCoordinates",
"latitude" : 55.9526313,
"longitude" : -3.1970679
},
"image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg",
"name" : "Grant McGregor",
"openingHoursSpecification" : {
"@type" : "OpeningHoursSpecification",
"closes" : "18:00",
"dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ],
"opens" : "08:00"
},
"sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ],
"telephone" : "+441316037910",
"url" : "https://grantmcgregor.co.uk/"
}
```