There is a moment every organisation hopes it never faces.

A late call. Incomplete information. A signal that something is wrong—but not yet defined. Within minutes, the room forms. Security, IT, legal, leadership. No one has the full picture, but everyone understands what is at stake.

This episode steps inside that room.

It explores what really happens in the first 72 hours of a serious breach—when technical investigation gives way to legal judgement, when the definition of “awareness” starts the clock, and when decisions made under pressure can shape regulatory, financial, and personal outcomes.

From the reporting obligations under General Data Protection Regulation and NIS2 Directive, to the lessons drawn from cases like British Airways, Marriott International, and Uber, this is not about how breaches happen.

It’s about what happens next—and how organisations are judged.

You can also subscribe to our podcast on the platforms below;