6 Actions CEOs Must Take During a Cyberattack.

This article focuses on six critical actions CEOs should take during a cyberattack, drawing lessons from the May 2021 ransomware attack on Colonial Pipeline, a key fuel supply company in the eastern United States. The attack led to a shutdown of pipeline operations, causing widespread fuel shortages, price spikes, and a national security crisis that prompted direct government intervention. Key recommendations for CEOs include careful public communication, coordination with government agencies, knowing appropriate contacts, having and regularly exercising a cyber incident response plan, understanding company IT and operational technology networks, and seeking expert assistance. The article emphasizes the evolving role of CEOs as guardians of trust in technology and highlights resources such as the U.S. Cybersecurity and Infrastructure Security Agency (CISA) for improving organizational resilience.