Impersonating reporters on panels has become one of my favorite past times. After the annual American Bankers Association meeting, where I played a reporter on a panel examining how to handle a computer hack/cyber-attack, the ABA invited me to recreate my performance at their annual meeting for Risk Managers. The panel was titled: “Incidence Response and Recovery: Is the Response Worse than the Attack?” The scenario was similar: your bank has been hacked. In this mock scenario, the institution in the hot seat was a billion dollar bank in the South named Lucky Bank, and the media outlet I represented was “UOMe” TV.
The first news of the hack came from credit card companies reporting that customers were complaining en masse about unauthorized charges and cancelled charges. Updates from the annual meeting panel included a plaintiffs law firm, Dewey Cheatum & How (borrowed from NPR’s Car Talk) trolling the internet looking for bank customers for a class action suit, and a well-connected, disgruntled blogger, Bankerbabe. In addition, Lucky Bank received word that the hackers were selling information allowing criminals to access ATMs so bank personnel were physically reprogramming ATMs outside their branches. Internet savvy customers noted the workmen and posted pictures of them on Instagram. Bankerbabe called them to my attention at the television station.
My role was to ask the questions the media would ask and to illustrate how social media platforms such as Facebook and Twitter complicate the communication challenge.
Experts speaking at the conference were virtually unanimous: it’s not if you’ll experience a hack, it’s when; so it’s wise to prepare. The conference covered the technical, legal and operational issues–and there were many. Although bank executives may feel they have quite enough to contend with in those areas, don’t forget that communication, both internal and external, is needed across the entire enterprise. And, you will undoubtedly have to communicate with key audiences before you have all the facts. Typically, you will not have any of the key facts confirmed when you get word through third parties or social media.
Are you prepared? Create a timeline beginning with taking the first phone call or reading the first tweet. How would you handle the questions below after the first hour? day? week? Hint: we’re not advising you be able to “answer” the questions, but you must have credible responses which convey confidence and inspire trust. And, you’ll have to deal with these questions from reporters, customers and the general public. If you’re lucky, the reporter or customer will call customer service, but they may also be trading rumors on social media.
Our reporter in this scenario had recently read a lengthy article about security procedures so she had some specific technical questions:
The panel’s scope did not encompass formulating the responses. That’s a topic for another conference, but grappling with the question will give you a snapshot of your preparedness.
So, are you prepared to respond? Ready, set, go!
You May Also Like
You might think that common sense would keep people from saying things like our winning BIMBOs for 2015, but it doesn’t. In fact, our natural habits are frequently dangerous. The BIMBO award is just an opportunity for us… more
This month’s winner is former Republican presidential candidate and Massachusetts Gov. Mitt Romney. Be sure to click through to the full Memo, which features more BIMBOs from President Obama, Sen. Diane Feinstein, CNN’s Piers Morgan and Whole Foods’… more
Lies, damned lies and you know what? This week I came across an interesting example of how statistics can be fundamentally misleading but can shape a debate when they are repeated over and over. Perhaps you’re following the… more
