Crises Control

🌍 Empowering organisations to stay resilient in crises.

🚨 Crisis Management | 📲 Mass Notifications | ☁️ Business Continuity

#StayInControl

[Crises Control @CrisesControl]

@itsMikeKipruto When primary communication tools are unavailable, the ability to confirm receipt of instructions and track task progress becomes the practical test of resilience. Pre-tested fallback procedures and role clarity matter more than the speed of service restoration.

[Crises Control @CrisesControl]

@NCSC A useful reminder that outages often coincide with a rise in opportunistic social engineering. Organisations should reinforce clear, pre-agreed channels for verification and keep contact lists and escalation paths accessible outside the affected platforms.

[Crises Control @CrisesControl]

The Microsoft 365 outage highlights why organisations need communication and incident coordination beyond their everyday workplace tools.

Read the full article:
https://t.co/ko5bf1aIsP

[Crises Control @CrisesControl]

If Microsoft 365 goes down, does your incident response go with it?

An IT outage can disrupt more than email. It can affect communication, escalation and operational coordination.

Your response needs to keep moving.

Could your organisation stay connected?

#Microsoft

[Crises Control @CrisesControl]

A prolonged Microsoft 365 outage is still disrupting email and collaboration tools for businesses and governments worldwide. Events like this underline the need for robust operational resilience plans that account for third-party platform failures.

#Microsoft

[Microsoft 365 Status @MSFT365Status]

We’re seeing positive results for service stability and increased capacity as a result of our latest traffic optimization actions. We're implementing these actions more broadly across affected regions as we seek to attain persistent recovery. A more comprehensive update can be found at MO1550821 in the Microsoft 365 admin center, as well as https://t.co/pYdahqxDv3 if the admin center is not available to you.

[Crises Control @CrisesControl]

@Reuters Pre-emptive closures of schools and non-essential services, plus flight cancellations, show how early activation of contingency plans can limit cascading operational impacts from severe weather.

[Crises Control @CrisesControl]

Available is not the same as operational. When ransomware or outages take digital services offline, organisations still need independent ways to reach people, assign tasks and maintain visibility.

[Guardian Digital, Inc. @gdlinux]

The most dangerous ransomware assumption may be that “available” and “operational” mean the same thing.

A facility can remain open while the digital services around it disappear. Employees can still be present while authentication, communications, transactions, search, or customer-facing systems are unavailable.

This is why cyber resilience has to be measured at the workflow level. Uptime dashboards alone do not tell leadership whether the organization can still function.

In practical terms, it is a good time to:
• Define service-level resilience metrics alongside infrastructure uptime.
• Identify workflows that fail when Entra ID or Microsoft 365 is unavailable.
• Verify emergency communications do not depend on the environment being recovered.
• Test manual workarounds with the people who would actually use them.

What does “operational” mean in your environment when the primary digital path is gone?

#CyberResilience #Ransomware #SecurityOperations #RiskManagement https://t.co/Hm3c3L7fY3

[Crises Control @CrisesControl]

Interested in a free demo? Visit https://t.co/CNcIslm8bc

[Crises Control @CrisesControl]

Sending alerts is easy. Managing the incident is the real challenge.

Crises Control helps financial organisations alert, coordinate, execute and prove their response, all in one platform.

Ready to see how? Request a demo.

#IncidentManagement #OperationalResilience

[Crises Control @CrisesControl]

Infrastructure resilience is not the same as business resilience. The recent Google Cloud London outage shows why dependency mapping, clear failover authority and tested communications matter when a critical zone goes offline.

[ComputerWeekly @ComputerWeekly]

Google Cloud London outage: Continuity lessons for IT leaders https://t.co/ZH2WxCJkEK

[Crises Control @CrisesControl]

@zerohedge Cyber threats to industrial refrigeration and cold storage highlight the need to treat operational technology as part of business continuity planning. Coordinated response between facilities and security teams can limit both inventory loss and safety risks.

[Crises Control @CrisesControl]

@macropaperr These recent banking disruptions show how a single hardware failure or third-party compromise can stop access across many institutions. Organisations should prioritise tested failover procedures and clear escalation paths that do not rely on the affected systems.

[Crises Control @CrisesControl]

Why out-of-band communication matters during a cyber incident:

https://t.co/Dn9Ez2dnJw

[Crises Control @CrisesControl]

Your systems are down. Your domain is isolated. Now how do you reach the people managing the response?

If your crisis communication relies on the same infrastructure under attack, you have a problem.

Your communication channels need to work independently.

#IncidentManagement

[Crises Control @CrisesControl]

Financial institutions are reinforcing business continuity plans and contingency drills after overseas cyber disruptions. Coordinated communications, task tracking and shared visibility remain essential to maintain service continuity.

[Thenationthailand @Thenationth]

The Bank of Thailand has called a meeting of financial institutions to strengthen cyber defences following information technology system disruptions and cyberattacks affecting financial institutions overseas.

The central bank has detected no impact on financial services in Thailand, while measures include closer monitoring of threats, information sharing and assessments to prepare responses that match the level of cyber risk.

Financial institutions will continue monitoring developments and conducting regular contingency drills for critical payment systems under their business continuity plans, prioritising service continuity and the public’s safe use of financial services.

#TheNationThailand #TheNation #BankOfThailand #FinancialInstitutions #Cybersecurity

Read more: https://t.co/QIxnerIrtV

[Crises Control @CrisesControl]

Official alerts show how cyber incidents on operational technology can quickly disrupt physical operations and critical supply chains. Clear coordination of people, alerts, tasks and real-time visibility helps organisations contain impact and protect inventory and safety.

[Cybersecurity and Infrastructure Security Agency @CISAgov]

Malicious cyber actors are targeting industrial refrigeration & cold chain monitoring systems. Our joint Fact Sheet with federal partners outlines key steps orgs can take to reduce risks to inventory, equipment, and operations. Read more 👉 https://t.co/K5HofsazmU

[Crises Control @CrisesControl]

The incident is over. Can you prove what happened?
Who received the alert? Why was that decision made? What can you learn?

For the public sector, accountability matters long after the incident ends.

Explore more: https://t.co/5ZwDQ8tUMP

#PublicSector #IncidentManagement

[Crises Control @CrisesControl]

@lukOlejnik The on-call technician spotting the temperature rise shows how monitoring and rapid human intervention can limit damage in connected operational technology.

[Crises Control @CrisesControl]

@Corix_JC @Forbes For smaller organisations the highest-value steps are usually clarifying decision rights, identifying a few truly critical processes and testing simple recovery actions with the people who will actually perform them, rather than producing lengthy plans that sit unused.

[Crises Control @CrisesControl]

@MasteringRisk The useful distinction is between a platform reporting as available and the specific capability an organisation needs remaining usable. Mapping those critical functions and testing workarounds for partial outages is often more practical than relying solely on vendor status pages.