Skip to main content
  • Foundation
  • Executive network
  • CEO Circle
  • Enterprise Solutions
  • Linkage Logo
  • Store
  • Sign In
  • Account
    • My Account
    • Logout
    • Global
    • India
    • MENA
SHRM
About
Book a Speaker
Join Today
Renew
Rejoin Now
Renew
  • Membership
  • Certification
    Certification

    Smiling asian student studying in library with laptop books doing online research for coursework, making notes for essay homework assignment, online education e-learning concept
    Get Certified!

    Be recognized as an HR leader with your SHRM-CP or SHRM-SCP credential.

    • How to Get Certified

      Demonstrate your ability to apply HR principles to real-life situations. No other HR certification compares.

      • How to Get Certified
      • Eligibility Criteria
      • Exam Details and Fees
      • SHRM-CP
      • SHRM-SCP
      • Which Certification is Best for Me
      • Certification FAQs
    • Prepare for the Exam

      Give yourself the best chance to pass your SHRM certification exam.

      • Exam Preparation
      • SHRM BASK
      • SHRM Learning System
      • Instructor-Led Learning
      • Self-Study
      • Study Aids & Add-ons
    • Recertification

      Recertify your SHRM Credentials before your end date!

      • Specialty Credentials
      • Qualifications
  • Topics & Tools
    Topics & Tools

    Stay up to date with workplace news and leverage our vast library of resources to streamline day-to-day HR tasks.

    The white house in washington, dc.
    Executive Order Impact Zone

    Do not abandon, but evaluate and evolve. It is about legal, equal opportunity for all.

    • News & Trends

      Follow breaking news and emerging workplace trends.

      Legal & Compliance

      Stay informed on workplace legal updates and their impacts.

      From the Workplace

      Explore diverse perspectives from your peers on today's workplaces.

      Flagships

      Get curated collections of podcasts, videos, articles, and more produced by SHRM.

    • HR Topics
      • AI in the Workplace
      • Civility at Work
      • Compensation & Benefits
      • Inclusion & Diversity
      • Talent Acquisition
      • Workplace Technology
      • Workplace Violence Prevention
      SEE ALL
      SHRM Research
    • Tools & Samples

      Access member resources and tools to streamline HR tasks.

      • Forms & Checklists
      • How-To Guides
      • Interactive Tools
      • Job Descriptions
      • Policies
      • Toolkits
      SEE ALL
      Ask an Advisor
  • Events & Education
    Events & Education

    SHRM25 in San Diego, June 29 - July 2, 2025
    Join us for SHRM25 in San Diego

    Register for the World’s Largest HR Conference being held on June 29 - July 2, 2025

    • Events
      • SHRM25
      • The AI+HI Project 2025
      • INCLUSION 2025
      • Talent 2026
      • Linkage Institute 2025
      SEE ALL
      Webinars
    • Educational Programs

      Designed and delivered by HR experts to empower you with the knowledge and tools you need to drive lasting change in the workplace.

      Specialty Credentials

      Demonstrate targeted competence and enhance credibility among peers and employers.

      Qualifications

      Gain a deeper understanding and develop critical skills.

    • Team Training & Development

      Customized training programs unique to your organization’s needs.

  • Business Solutions
  • Advocacy
    Advocacy

    Make your voice heard on public policy issues impacting the workplace.

    Advocacy
    SHRM's President & CEO testifies to Congress on "The State of American Education"
    • Policy Areas
      • Workforce Development
      • Workplace Inclusion
      • Workplace Flexibility & Leave
      • Workplace Governance
      • Workplace Health Care
      • Workplace Immigration
      State Affairs

      SHRM advances policy solutions in state legislatures nationwide.

      Global Policy

      SHRM is the go-to for global HR leaders and businesses on workplace matters.

    • Advocacy Team (A-Team)

      SHRM’s A-Team is a key member benefit, giving you the tools, insights, and opportunities to shape workplace policy and drive real impact.

      Take Action

      Urge lawmakers to support policies that create lasting, positive change.

      Advocacy & Legislative Resources

      Access SHRM’s curated policy materials and content.

    • SHRM-Led Coalitions
      • Generation Cares
      • The Section 127 Coalition
      • Learn More & Partner with SHRM Government Affairs
  • Community
    Community

    Woman raising hand in group
    Find a SHRM Chapter

    Easily find a local professional or student chapter in your area.

    • Chapters

      Find local connections from over 607 chapters and state councils and create your personalized HR network.

      SHRM Connect

      Post polls, get crowdsourced answers to your questions and network with other HR professionals online.

      SHRM Northern California

      Join SHRM members in the greater San Francisco Bay area for local events and networking.

    • Membership Councils

      Learn about SHRM's five regional councils and the Membership Advisory Council (MAC).

      • Membership Advisory Council
      • Regional Councils
    • Volunteers

      Learn about volunteer opportunities with SHRM.

      • Volunteer Leader Resource Center
Close
  • Membership
  • Certification
    back
    Certification
    Smiling asian student studying in library with laptop books doing online research for coursework, making notes for essay homework assignment, online education e-learning concept
    Get Certified!

    Be recognized as an HR leader with your SHRM-CP or SHRM-SCP credential.

    • How to Get Certified

      Demonstrate your ability to apply HR principles to real-life situations. No other HR certification compares.

      • How to Get Certified
      • Eligibility Criteria
      • Exam Details and Fees
      • SHRM-CP
      • SHRM-SCP
      • Which Certification is Best for Me
      • Certification FAQs
    • Prepare for the Exam

      Give yourself the best chance to pass your SHRM certification exam.

      • Exam Preparation
      • SHRM BASK
      • SHRM Learning System
      • Instructor-Led Learning
      • Self-Study
      • Study Aids & Add-ons
    • Recertification

      Recertify your SHRM Credentials before your end date!

      • Specialty Credentials
      • Qualifications
  • Topics & Tools
    back
    Topics & Tools

    Stay up to date with workplace news and leverage our vast library of resources to streamline day-to-day HR tasks.

    The white house in washington, dc.
    Executive Order Impact Zone

    Do not abandon, but evaluate and evolve. It is about legal, equal opportunity for all.

    • News & Trends

      Follow breaking news and emerging workplace trends.

      Legal & Compliance

      Stay informed on workplace legal updates and their impacts.

      From the Workplace

      Explore diverse perspectives from your peers on today's workplaces.

      Flagships

      Get curated collections of podcasts, videos, articles, and more produced by SHRM.

    • HR Topics
      • AI in the Workplace
      • Civility at Work
      • Compensation & Benefits
      • Inclusion & Diversity
      • Talent Acquisition
      • Workplace Technology
      • Workplace Violence Prevention
      SEE ALL
      SHRM Research
    • Tools & Samples

      Access member resources and tools to streamline HR tasks.

      • Forms & Checklists
      • How-To Guides
      • Interactive Tools
      • Job Descriptions
      • Policies
      • Toolkits
      SEE ALL
      Ask an Advisor
  • Events & Education
    back
    Events & Education
    SHRM25 in San Diego, June 29 - July 2, 2025
    Join us for SHRM25 in San Diego

    Register for the World’s Largest HR Conference being held on June 29 - July 2, 2025

    • Events
      • SHRM25
      • The AI+HI Project 2025
      • INCLUSION 2025
      • Talent 2026
      • Linkage Institute 2025
      SEE ALL
      Webinars
    • Educational Programs

      Designed and delivered by HR experts to empower you with the knowledge and tools you need to drive lasting change in the workplace.

      Specialty Credentials

      Demonstrate targeted competence and enhance credibility among peers and employers.

      Qualifications

      Gain a deeper understanding and develop critical skills.

    • Team Training & Development

      Customized training programs unique to your organization’s needs.

  • Business Solutions
  • Advocacy
    back
    Advocacy

    Make your voice heard on public policy issues impacting the workplace.

    Advocacy
    SHRM's President & CEO testifies to Congress on "The State of American Education"
    • Policy Areas
      • Workforce Development
      • Workplace Inclusion
      • Workplace Flexibility & Leave
      • Workplace Governance
      • Workplace Health Care
      • Workplace Immigration
      State Affairs

      SHRM advances policy solutions in state legislatures nationwide.

      Global Policy

      SHRM is the go-to for global HR leaders and businesses on workplace matters.

    • Advocacy Team (A-Team)

      SHRM’s A-Team is a key member benefit, giving you the tools, insights, and opportunities to shape workplace policy and drive real impact.

      Take Action

      Urge lawmakers to support policies that create lasting, positive change.

      Advocacy & Legislative Resources

      Access SHRM’s curated policy materials and content.

    • SHRM-Led Coalitions
      • Generation Cares
      • The Section 127 Coalition
      • Learn More & Partner with SHRM Government Affairs
  • Community
    back
    Community
    Woman raising hand in group
    Find a SHRM Chapter

    Easily find a local professional or student chapter in your area.

    • Chapters

      Find local connections from over 607 chapters and state councils and create your personalized HR network.

      SHRM Connect

      Post polls, get crowdsourced answers to your questions and network with other HR professionals online.

      SHRM Northern California

      Join SHRM members in the greater San Francisco Bay area for local events and networking.

    • Membership Councils

      Learn about SHRM's five regional councils and the Membership Advisory Council (MAC).

      • Membership Advisory Council
      • Regional Councils
    • Volunteers

      Learn about volunteer opportunities with SHRM.

      • Volunteer Leader Resource Center
Join Today
Renew
Rejoin Now
Renew
  • Store
    • Global
    • India
    • MENA
  • About
  • Book a Speaker
  • Foundation
  • Executive network
  • CEO Circle
  • Enterprise Solutions
  • Linkage Logo
SHRM
Sign In
  • Account
    • My Account
    • Logout
Close

  1. Topics & Tools
  2. Workplace News & Trends
  3. HR Plays Crucial Role in Response to Cyberattacks
Share
  • Linked In
  • Facebook
  • Twitter
  • Email

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vivamus convallis sem tellus, vitae egestas felis vestibule ut.


Error message details.

Copy button
Reuse Permissions

Request permission to republish or redistribute SHRM content and materials.


Learn More
News

HR Plays Crucial Role in Response to Cyberattacks

May 11, 2023 | Dave Zielinski

A group of business people looking at a computer screen.


​Common wisdom holds that when organizations are hit by a cyberattack, the ensuing response should be led by information technology (IT), security, legal and finance staff, with human resources taking a back seat. But cybersecurity experts say HR's communication skills, key role as the bridge between leadership and employees, and knowledge of sensitive worker data should make it an integral rather than a peripheral member of any incident response team.

"Too many times companies think only IT and security should be part of the incident response, but they overlook HR," said LeeAnne Pelzer, consulting director of Unit 42 at Palo Alto Networks, a cybersecurity company in Santa Clara, Calif. "In the middle of a response, organizations often realize just how important HR is, but by that point they're usually scrambling or hitting communication bottlenecks because they didn't integrate HR into the planning process. There are always critical responsibilities right after a cyberattack that align with HR."

HR's Role When a Cyberattack Hits

With cyberattacks on the rise, experts say it's only matter of time before most organizations fall prey to some form of cybercrime. How well they respond will be a function of how well they plan for that eventuality, and cybersecurity pros say HR should be a key part of an incident response team that conducts tabletop exercises and simulations to delineate roles and rehearse responses to cyberattacks.

Jess Burn, a senior analyst in security and risk with Forrester, said the primary role for HR following a cyberattack is one of communication, relaying pertinent information or instructions to the workforce after consulting with the cross-functional incident response team.

"HR should reassure employees the organization has a plan in place, has been preparing for this or similar incidents and is working to resolve any issues affecting organizational productivity and viability," Burn said.

HR should craft the core of these messages in advance of any potential cyberattack to ensure the right tone is set, and that communication is compliant with company policy and defensible should litigation arise from the incident, Burn said.

Pelzer said HR's communication responsibilities following a cyberattack should include addressing employee questions or concerns using a multichannel approach, helping to inform customer service teams about what to communicate to clients about the attack, and communicating to the workforce about how access to any impacted technology platforms will be affected.

"No one party should handle communications alone, however," Pelzer said. "Creating and delivering messages should be a joint effort between HR, legal, IT and security experts. Communication should include what happened and what information may have been compromised, what's being done about it, and stressing that the situation is still evolving if all the facts aren't yet known. Not communicating proactively with internal or external stakeholders is one of the quickest ways to harm your reputation in these scenarios." 

Kathy Walen, vice president of people for Code42, a cybersecurity firm In Minneapolis, agrees that responding to a cyberattack should be a team effort, with HR playing a lead communications role.

"It's not just the role of a security team to think about risks and threats; it's the responsibility of the entire organization," Walen said. "For HR it's about working in partnership with the IT and security team to develop a response plan."

Walen said it's vital for HR to stay in close contact with those internal partners as a response unfolds to create consistent messaging to internal and external audiences.

"If sensitive employee data was breached, for example, it's important to be transparent about the reach of the cyberattack so people understand what's at risk and what the company is doing to mitigate those risks as quickly as possible," Walen said.

Additional Key Roles for HR

If employee data is affected by a cyberattack, Burn said HR should lead the assessment of any regulatory compliance issues and roll out employee support for identification monitoring services. Given its role in compliance, HR should work with legal in assessing whether any privacy regulations that govern how companies store and protect employee data—such as the General Data Protection Regulation or the California Consumer Privacy Act—were impacted by a data breach.

Pelzer believes one of the most important roles for HR following a cyberattack is to compare active user network accounts against a current list of employees and contractors. User accounts can often become inactive but stay open when employees depart a company or go on extended leave, providing an opportunity for hackers.

"Dormant accounts are sometimes used to carry out a threat actor's objectives, whether that threat comes from outside or inside the company," Pelzer said. "It's critical that the list of active accounts aligns with the number of current employees and contractors, and HR is one of the best sources for that information."

HR's role in a response should be expanded if a cyberattack is caused by a malicious insider, experts say. "That's especially the case if an employee termination is necessary," Burn said. "In that case HR would need to work with legal and privacy teams to ensure termination or other punitive action is defensible should a lawsuit be filed."

Should the source of an attack be internal, HR's role also would be to consult with legal around user account access and data retention issues, Pelzer said. "HR should meet with legal to put the necessary hold on certain accounts or system access if there was data exfiltration," she said. "For example, legal will sometimes put a special hold on a user account to retain data because they may need to submit it to a regulatory agency or for insurance purposes after an attack."

Burn said HR also should assist in ensuring front-line incident responders don't burn out and have time to recharge during what can often be a prolonged response period.

"HR should work with the CISO [chief information security officer], CIO [chief information officer] and the company's retained incident response (IR) services firm if it has one to ensure there's a bench of capable security, IT and IR services team members to provide relief for the core team," Burn said.

Detailed Plans, Practice Key to Effective Response

The biggest reason why organizations fail to respond effectively to cyberattacks—often damaging their reputations and impacting financial performance for years—is the lack of thorough planning for these events.

"The biggest misstep I see is not preparing well for these scenarios," Burn said. "Time and effort is needed not only to develop incident response plans and playbooks with associated rules and responsibilities, but also to test them."

Burn said that requires conducting tabletop exercises and full-crisis simulations, ideally led by outside counsel or an IR services firm. "It should allow HR to work through its delineated roles and responsibilities and find out where communication breaks down or where specific messages or actions are missing from the response plan," she said.

Sam Grinter, a senior principal analyst with Gartner, studied how clients of HR technology vendor UKG responded when that company was hit by a ransomware attack in 2021, an event that interrupted payroll and timekeeping services for 2,000 of UKG's private cloud customers.

"Having spoken to many companies impacted by the UKG attack, it's easy to see differences in outcomes based on the quality of pre-planning for such an event," Grinter said. Many customers who fared well had created plans for manual back-up systems with incident response teams ready go with contingency plans when the ransomware attack happened, he said.

Pelzer said having a well-rehearsed plan ensures that panic and disjointed responses don't win out when a cyberattack is identified. "A cyberattack might arguably be one of the worst days you ever experience at work, and your brain may not be firing on all cylinders," she said. "That's when you need to lean on your plan. It's easy when you're feeling pressure or stress to skip over critical parts of a good response to a cyberattack, but your plan will bring you back in line."

Dave Zielinski is principal of Skiwood Communications, a business writing and editing company in Minneapolis.

Data Security
Risk Management
Technology
Workplace Security

Artificial Intelligence in the Workplace

​An organization run by AI is not a futuristic concept. Such technology is already a part of many workplaces and will continue to shape the labor market and HR. Here's how employers and employees can successfully manage generative AI and other AI-powered systems.



Related Content

Kelly Dobbs Bunting speaks onstage at SHRM24
(opens in a new tab)
News
Why AI+HI Is Essential to Compliance

HR must always include human intelligence and oversight of AI in decision-making in hiring and firing, a legal expert said at SHRM24. She added that HR can ensure compliance by meeting the strictest AI standards, which will be in Colorado’s upcoming AI law.

(opens in a new tab)
News
A 4-Day Workweek? AI-Fueled Efficiencies Could Make It Happen

The proliferation of artificial intelligence in the workplace, and the ensuing expected increase in productivity and efficiency, could help usher in the four-day workweek, some experts predict.

(opens in a new tab)
News
How One Company Uses Digital Tools to Boost Employee Well-Being

Learn how Marsh McLennan successfully boosts staff well-being with digital tools, improving productivity and work satisfaction for more than 20,000 employees.

HR Daily Newsletter

Stay up to date with the latest HR news, trends, and expert advice each business day.

Success title

Success caption

Manage Subscriptions
  • About SHRM
  • Careers at SHRM
  • Press Room
  • Contact SHRM
  • Book a SHRM Executive Speaker
  • Advertise with Us
  • Partner with Us
  • Copyright & Permissions
  • Post a Job
  • Find an HR Job
Follow Us
  • LinkedIn
  • Facebook
  • Twitter
  • Instagram
  • YouTube
  • SHRM Newsletters
  • Ask An Advisor

© 2025 SHRM. All Rights Reserved

SHRM provides content as a service to its readers and members. It does not offer legal advice, and cannot guarantee the accuracy or suitability of its content for a particular purpose. Disclaimer


  1. Privacy Policy

  2. Terms of Use

  3. Accessibility

Join SHRM for Exclusive Access to Member Content

SHRM Members enjoy unlimited access to articles and exclusive member resources.

Already a member?
Free Article
Limit Reached

Get unlimited access to articles and member-exclusive resources.

You've reached the limit of 1 free article this month. Join to access unlimited articles and member-only resources.

Already a member?
Free Article
Exclusive Executive-Level Content

This content is for the SHRM Executive Network and Executive Content Subscription members only.

You've reached the limit of 1 free article this month. Join the Executive Network and enjoy unlimited content.

Already a member?
Free Article
Exclusive Executive-Level Content

This content is for the SHRM Executive Network and Executive Content Subscription members only.

You've reached the limit of 1 free article this month. Join and enjoy unlimited access to SHRM Executive Network Content.

Already a member?
Unlock Your Career with SHRM Membership

Please enjoy this free resource! Join SHRM for unlimited access to exclusive articles and tools.

Already a member?

Your membership is almost expired! Renew today for unlimited access to member content.

Renew now

Your membership has expired. Renew today for unlimited access to member content.

Renew Now

Your Executive Network membership is nearing its expiration. Renew now to maintain access.

Renew Now

Your membership has expired. Renew your Executive Network benefits today.

Renew Now