To successfully deal with a cyber incident, a communication plan is key. Firstly, consider who you need to speak to in the event of a cyber incident and in what order. Consider your cyber insurance provider, law enforcement, regulators, external clients or stakeholders, employees, and the media. Make a list of names and phone numbers. For all types of events, we suggest you contact your cyber insurance provider first, as a good incident response team will understand the nuances of crisis communications. Secondly, ask yourself what statements can you prepare in advance. Preparing coherent statements with stakeholders in advance can save valuable time if crisis strikes. Do this for a full range of incident types.