Costly Mistakes in Incident Response: One Conversation, All Perspectives

When a Breach Strikes, the First 72 Hours Can Determine Everything. 

Organizations often make avoidable mistakes, from overlooking backups to misjudging insurance coverage, that can turn a bad situation into a disaster.

That’s why this on-demand discussion brings together all three voices you’ll hear in the heat of a breach: incident response, legal counsel, and cyber insurance. By having everyone in the same room, this panel will unpack where guidance overlaps, where it diverges, and how you can make the best call for your own circumstances.

We’re partnering with NFP and Thompson Hine to give you a complete, real-world view of the incident response process. 

Watch our on-demand recording for a candid conversation designed to prepare you for the high-stakes decisions no one wants to face, but every organization must plan for.

What You’ll Hear:

This unscripted discussion will explore key themes from the incident response process where IR experts, legal counsel, and insurance leaders challenge and complement each other’s perspectives on these topics:

• The hidden gaps attackers exploit: why shortcuts in authentication, VPN setups, and convenience-driven security leave you exposed. 
• The recovery realities no one tells you: from ransom payments to regulatory reporting, why “business as usual” is never instant.
• The legal traps of breach response: how mismanaging messaging, negotiations, or reporting obligations can escalate risk.
• The fine print in insurance: what policies really cover (and don’t), and how to avoid delays.  
• Who to call first: a candid discussion from incident response, legal, and insurance perspectives. These groups may not always agree, but you’ll leave ready to navigate this and make the best decisions for your situation.

Stop Guessing and Start Strategizing:

The on-demand workshop is particularly valuable if your business:

• Operates in a regulated industry where reporting obligations matter.
• Relies on cyber insurance but isn’t sure what’s actually covered. 
• Hasn’t designated or engaged an IR provider before.
• Uses legacy VPN setups or authentication practices that may expose gaps. 
• Has not tested its incident response plan with a table-top exercise. 
• Needs a clear plan for out-of-band communication during a crisis. 

Panelists Include:

• Nathan Phillips: AVP, Cybersecurity at Dataprise
• Daniel Felzke: Senior Director, Incident Response at Dataprise
• Courtney Mauge: SVP and Cyber Practice Leader at NFP, an Aon Company
• Steven Stransky: Partner and Co-Chair at Thompson Hine