Untested Incident Plan Goes Straight to the Board

Decisions 4 today

The business responds

• Finance heard that the fly wanted more information on “Regulatory audit: notice” and refused, loudly enough to be heard two floors down. They cooled on the fly a little.

  “A regulatory notice is not an invitation to groom over the inbox. Send the scope, costed response options, owner, and decision deadline.”

  Finance Pushed back trust -2

  Next, they want: “By 3 p.m., provide a one-page audit response sheet with minimum compliance cost, deferred-risk cost, funding source, accountable owner, and firm decision deadline.” They have already asked for a slot in the fly's diary.

• OT / Grid Operations heard that the fly wanted more information on “Regulatory audit: notice” and refused, loudly enough to be heard two floors down. They cooled on the fly a little.

  “Demanding more information is not an audit response. Please stop cleaning your eyes and send the evidence list, reviewers, deadline, and no-change confirmation.”

  OT / Grid Operations Pushed back trust -1

  Next, they want: “Send the written audit resolution plan today, with named reviewers, interim risk ownership, a dated decision deadline, and Grid Operations approval for any production change.” Expect an email.

• When the fly sent “Phishing wave: A wave of credential-harvesting mail is hitting staff inboxes” up to the board, HR dug in its heels. They cooled on the fly a little.

  “The board may now admire the inboxes. HR still needs one approved staff message, one reporting route, one manager script, and somewhere to send worried employees.”

  HR Pushed back trust -1

  Next, they want: “Send HR today the plain-language notice, manager script, reporting route, employee support contact, attendance guidance, and one named decision owner.” Expect an email.

• Executive Board heard that the fly sent “Incident response plan nobody has ever rehearsed” up to the board and refused, loudly enough to be heard two floors down. They cooled on the fly a little.

  “Escalating an untested plan is not a control. Put the costed rehearsal, interim coverage, named owners and exact Board decision on one page first.”

  Executive Board Pushed back trust -1

  Next, they want: “Within one hour, submit the one-page rehearsal and interim 24/7 coverage plan, including residual risk and named incident, legal and communications owners.” Expect an email.

• When the fly sent “Phishing wave: A wave of credential-harvesting mail is hitting staff inboxes” up to the board, IT / Infrastructure dug in its heels. They cooled on the fly a little.

  “The Board can have the incident summary. Staff still need an approved message before the inbox turns into a company-wide suggestion box.”

  IT / Infrastructure Pushed back trust -1

  Next, they want: “Authorize a 30-minute IT, Security, Operations and Communications review today, with one approved staff message and named owners.” Expect an email.

Diary

• Finance: “By 3 p.m., provide a one-page option sheet with minimum cost, deferred-risk cost, funding source, accountable owner, and firm decision deadline.” One-to-one · dropped

  Back on day 51, Finance asked for a one-to-one with the fly about “By 3 p.m., provide a one-page option sheet with minimum cost, deferred-risk cost, funding source, accountable owner, and firm decision deadline”. It was postponed once, and today it quietly vanished from the calendar. Nobody has asked where it went.

• Legal / Compliance: “Provide a dated gap list and a counsel-reviewed draft naming the regulator, deadlines, owner, preservation status, and decision basis.” One-to-one · postponed

  Back on day 54, Legal / Compliance asked for a one-to-one with the fly about “Provide a dated gap list and a counsel-reviewed draft naming the regulator, deadlines, owner, preservation status, and decision basis”. It was due today, and got pushed back over a diary clash nobody will explain.

• IT / Infrastructure: “Authorize the 30-minute IT, Security, Operations and Communications review today, with one approved staff message and named owners.” One-to-one · postponed

  Back on day 55, IT / Infrastructure asked for a one-to-one with the fly about “Authorize the 30-minute IT, Security, Operations and Communications review today, with one approved staff message and named owners”. It was due today, and got pushed back over a diary clash nobody will explain.

• Finance: “Submit the one-page costed options sheet by 3 p.m., including minimum containment cost, deferred-risk cost, funding source, accountable owner, and decision deadline.” Meeting · postponed

  Back on day 56, Finance asked for a meeting with the fly about “Submit the one-page costed options sheet by 3 p.m., including minimum containment cost, deferred-risk cost, funding source, accountable owner, and decision deadline”. It was due today, and got pushed back over a diary clash nobody will explain.

• HR: “Send HR the plain-language notice, manager script, employee support contact, attendance guidance, and one named decision owner today.” One-to-one · postponed

  Back on day 57, HR asked for a one-to-one with the fly about “Send HR the plain-language notice, manager script, employee support contact, attendance guidance, and one named decision owner today”. It was due today, and got pushed back over a diary clash nobody will explain.

What each department thinks of the fly