Elements of Effective Communications for Cybersecurity Teams

Communications, both in times of crisis and during normal operations, are essential to the overall success and sustainability of an incident response or security operations team. How you plan for and manage these communications and how they are received and actioned by your audience will influence your trustworthiness, reputation, and ultimately your ability to perform incident management services effectively. This webcast leverages the National Institute of Standards and Technology (NIST) Cybersecurity Framework and the Forum of Incident Response and Security Teams (FIRST) CSIRT Services Framework to present communications responsibilities as part of both the standard incident management lifecycle and as an integral piece of crisis management support.

What Attendees Will Learn:

various communication types or mechanisms for normal and crisis situations
foundational aspects of managing communications with constituents, the public, and the media
building blocks for an effective communications plan

Speaker and Presenter Information

Sharon Mudd is a Senior Cybersecurity Operations Researcher in the CERT� division of the Software Engineering Institute at Carnegie Mellon University. In this role, Mudd helps international teams build security operations and incident management capabilities mentors individuals, and builds skills for a broad range of cybersecurity roles to foster development of maturity for security incident response and security operations teams. Her career spans over 30 years in IT and information security roles, focusing on information security governance, risk management, compliance, and assurance. She has been a Governance, Risk, and Compliance (GRC) leader in several organizations with global information security responsibilities across a diverse set of industries, including financial services, retail, education, government, telecommunications, and healthcare. In 2024, Mudd completed a PhD in Information Assurance and Cybersecurity focusing on human factors within information security risk management.