The fastest way to turn a cyber incident into a business disaster isn’t ransomware, it’s confusion. We sit down with Violet Sullivan, AVP and Cyber Solutions Team Lead at Crum & Forster, who has worked across cyber law, breach notification, digital forensics and incident response, and now cyber insurance. That vantage point lets her translate what each group needs when pressure is high and everyone is speaking a different language.

We get practical about the moments that create real-world chaos: overlapping roles like “breach coach,” acronyms that make leaders freeze, and the dangerous assumption that someone else already handled comms or law enforcement outreach. Violet breaks down a cleaner way to run the response by focusing on function: legal help, technical help, and operational help. We also talk about why crisis communications deserves a seat at the table early, how PR teams organize messaging by audience, and how to avoid the cleanup phase that happens when people speak too soon.

Then we zoom out to the contract that quietly shapes the whole response: cyber insurance. Violet explains why insurance is not “admitting defeat,” but a risk transfer mechanism that can fund response vendors and influence decisions when you cannot afford mistakes. We also tackle emerging AI risks, including more believable social engineering and the legal concern that sharing privileged legal advice with AI tools may put attorney-client privilege at risk.

If you want clearer incident response planning, better tabletop exercises, and fewer “who has the ball?” moments, hit play. Subscribe, share this with your security or legal team, and leave a review with the one part of your response plan you want to simplify next.

🔗 Connect with Us & Get in Touch

Tune in to Simplifying Cyber wherever you get your podcasts, or watch exclusive video content right here on the channel. Subscribe for hot takes on emerging technologies, tips and tricks for everyone looking to stay secure, and in-depth conversations about complex cybersecurity topics.

No gatekeeping and no BS. We’re here to simplify.

Official Website: www.revealrisk.com

LinkedIn: https://www.linkedin.com/company/reveal-risk

🤘 Stay Secure with Us

If this content helped you understand cybersecurity better, please give it a thumbs up, subscribe to our channel for more expert insights, and hit the notification bell so you don't miss our latest updates.

Reveal Risk delivers cybersecurity results, not just reports.