Feedback to scenarios

Having considered the risks and motives in previous steps, as well as your own experiences of cyber crime and cyber attacks, have a read of the following four case studies:

They are all from the UK local government sector and demonstrate how the attacks can vary, but also show how each council department’s response varies too.

Cyber attack: could you run services without IT for a week?

In 2016, Lincolnshire County Council was subject to a malicious software attack causing a week-long shut down of the council’s IT systems as the authority investigated the malware’s impact: Cyber attack: could you run services without IT for a week?

Doncaster: managing a cyber attack

In April 2017, Doncaster Council was hit by a cyber-attack. This case study provides a summary of events and how the organisation successfully managed the incident: Doncaster: managing a cyber attack.

Islington: managing a cyber attack

In July 2017 the London Borough of Islington was hit by a Distributed Denial of Services (DDoS) cyber-attack. This case study provides a summary of the events that took place and the steps the organisation took to manage the incident: Islington: managing a cyber attack.

Copeland Borough Council: managing a cyber attack

During the August bank holiday in 2017, Copeland Borough Council was hit by a zero-day ransomware cyber attack: Copeland Borough Council: managing a cyber attack.

Your task

Read the case studies and focus on one in particular. Consider the different situations and responses taken, and reflect on what you have learned so far and how you may have managed the attack differently.