QBE group CEO Andrew Horton says cyber breaches are now common and for most organisations it is “not a matter of if an incident will occur but when”.

Mr Horton made the comment in Sydney at Leading Through a Cyber Crisis – an event hosted by QBE and security group CYGNVS focused on leadership responses to major incidents.

“The organisations that respond best to cyber incidents are the ones that have invested in preparation, leadership and practice before a crisis occurs,” Mr Horton told the audience.

“Cyber resilience is built long before it is needed.”

Attendees heard how organisations can strengthen their preparedness and co-ordinate their response under pressure.

Medibank chair Mike Wilkins – a former QBE chair – discussed leadership accountability, governance and decision-making.

And CYGNVS CEO Arvind Parthasarathi led an interactive cyber crisis simulation to identify gaps, challenge assumptions and “build muscle memory”.