by amvandenhurk | May 27, 2026
By Ann Marie van den Hurk, Mind The Gap Advisory CIRCIA compliance and incident response: why decision authority is the missing piece CIRCIA compliance is moving from preparation to obligation. With the Cyber Incident Reporting for Critical Infrastructure Act’s... 
by amvandenhurk | May 15, 2026
Who approves the first move in a cyber incident? By Ann Marie van den Hurk, Mind The Gap Advisory When a cyber incident begins, the first decisions are not technical. They happen before the security team has a complete picture. Before legal has reviewed... 
by amvandenhurk | May 7, 2026
By Ann Marie van den Hurk, Mind The Gap Advisory When the narrative sets without you: what the first hour of a cyber incident actually costs In a cyber or AI-generated crisis, minute twenty feels like stabilization. The statement went out. The pressure... 
by amvandenhurk | Apr 30, 2026
By Ann Marie van den Hurk, Mind The Gap Advisory The first statement is not a communications problem When a cyber incident hits, most organizations discover something they should have resolved months earlier. Not a technology gap. Not a staffing gap. A decision... 
by amvandenhurk | Apr 23, 2026
By Ann Marie van den Hurk, Mind The Gap Advisory PwC’s Global Crisis and Resilience Survey found that a majority of executives expect their organizations to face a significant crisis within the next two years. Far fewer feel fully prepared to respond. The... 
by amvandenhurk | Apr 21, 2026
By Ann Marie van den Hurk, Mind The Gap Advisory Yes. But not the kind most organizations are looking for. When executives, CISOs, and board members search for an executive decision-making framework for cyber and AI crises, they typically find one of three...