Cybertix presents CyberCrisis Management at ISMS Forum: preparing organisations for a cyber crisis

At a glance

Event

XXVIII International Information Security Conference (Jornada Internacional de Seguridad de la Información), organised by ISMS Forum

Date

Thursday 12 November 2026

Registration opens

08:00

Venue

Riyadh Air Metropolitano, Av. de Luis Aragonés, 4, 28022 Madrid (entrance through gate 34)

Session

Track 3: presentation of CyberCrisis Management

Participants

Marcos Gómez Hidalgo (CISO at INCIBE and ISMS Forum Board member), Beatriz Díaz Peña (Head of Cybersecurity Training and Awareness, Cybertix) and Josep Bardallo (Cybersecurity & Cloud Managing Director, Excelia)

CyberCrisis Management: when a crisis tests the whole organisation

How do you manage a cyber crisis when every minute counts? Are we truly prepared to make decisions under pressure, coordinate teams and protect business continuity? These are the questions raised by CyberCrisis Management, the project being presented in Track 3 of the conference, which focuses on one of cybersecurity’s greatest challenges: managing cyber crises.

The presentation will feature Marcos Gómez Hidalgo, CISO at INCIBE and ISMS Forum Board member; Beatriz Díaz Peña, Cybertix’s Head of Cybersecurity Training and Awareness; and Josep Bardallo, Cybersecurity & Cloud Managing Director at Excelia.

The underlying idea is one we have long championed: managing a cyber crisis involves more than resolving a technical incident. It requires leadership, communication, coordination, preparation and the ability to make decisions at the most critical moments. Ultimately, it is a matter of building a culture of cyber resilience within organisations.

Crisis readiness comes from practice

Almost every business has an incident response plan, but few put it to the test. A real cyberattack is the worst possible time to discover that nobody knows who decides to disconnect a system, who to call first or how to communicate the situation to customers and suppliers.

This is the point we will share at the conference: the difference between having a plan and being prepared. The most effective way we know to close that gap is through practice.

Are you ready? Five questions for your business

• If your main service goes down tomorrow, does everyone know who makes the decisions?
• Do you know who to notify first, and within what deadlines, if personal data is affected?
• Is it clear who can disconnect a system and on what grounds?
• Do you know how and what to communicate to customers, suppliers and the media?
• Have you ever tested the plan with a simulated incident?

If any answer is “I’m not sure”, a cyber exercise is the shortest route to readiness.

Cyber exercises: rehearsing a crisis without risk

A cyber exercise, or tabletop exercise, is a guided simulation in which a company’s crisis management committee faces a simulated incident (ransomware, extortion, a data breach or a service outage) without any risk to its systems. In our format:

• A real-time dashboard shows active events, rounds and the time available to make decisions.
• Four skills are practised: deciding under pressure, responding, understanding internal procedures and coordinating the committee.
• A facilitator leads a debriefing at the end of each round, drawing out lessons learned and specific recommendations.
• You receive a results report covering objectives and scope, a summary of the simulation, evaluation and conclusions, useful for your management committee and audits.
• Exercises can take place in person, remotely or in a hybrid format.

For any business, in any sector and of any size

Cyber exercises are suitable for businesses of every size. We tailor them to each company, including SMEs, so they have all the tools they need to face a crisis: a committee that knows how to act, tested procedures, a trained management team and evidence to present to customers and auditors.

They integrate with the rest of our training: the CYBERFORGE platform for continuous training and awareness across the workforce, and specific training for management. They are also supported by services such as the All-in-One 24×7 SOC and regulatory compliance, helping practical response and the legal framework work together.

Shall we talk?

If you will be at the Metropolitano on 12 November, or simply want to find out what a cyber exercise could look like for your business, get in touch for a conversation with no obligation.

Frequently asked questions