Heather Pennel

Most organizations believe they are prepared for a cyber-crisis until they experience one.  Policies exist, incident response plans are documented, and tools are deployed. However, when a real breach unfolds, leaders often discover the painful truth that being prepared on paper does not mean our behaviors are ready to lead in a crisis. Preparedness on paper does not translate into preparedness in behavior.

The most significant cybersecurity hack of 2025 made headlines in the final quarter of the year. This attack appears to be the first of its kind as a state-sponsored AI Agent driven cyber espionage attack.

Not all vulnerabilities in today’s networks start with malicious intent. Many employees are tech-savvy and, when systems aren’t working or feel slow, they often find their own solutions....because “there’s an app for that.” These workarounds truly can boost productivity, bridge functionality gaps, or streamline tasks.