INSIGHTS
Expert Perspectives, Publications,
and Next Peak Press
All Posts
Driving Tangible Resilience Improvements
| By Gregory Rattray, Rico Brandenburg, and Matthew Gruber | The success of the resilience program hinges on getting front-line (business and support functions) buy-in, as the front line owns the delivery of the service. One of the biggest
challenges with traditional business continuity is that business continuity activities (for example, business impact analysis, business continuity planning) have not received the time and attention they deserve.
Stress Testing in a World of Compound Risks and Polycrises
Stress testing has become a tool of choice in banking for risk managers and regulators alike, and it is used more widely as a way to assess resilience to severely adverse events. Yet even the most creative risk manager would have been challenged to design a scenario that would have adequately captured the plethora of shocks that manifested from early 2020 to the present (April 2023). We make use of the polycrisis concept to motivate a rethinking of stress test design.
The Cyber Defense Assistance: Imperative Lessons from Ukraine
| Written By Gregory Rattray, Geoff Brown, and Robert Taj Moore | Russia’s further invasion of Ukraine in February 2022 was a watershed moment. Governments, citizens, and companies faced a choice—they could support Ukraine in its fight to defend its independence or they could sit back while Russia destroyed the post-war order that has stood since 1945. On an unprecedented scale, a major nation-state had engaged in coordinated, convergent digital and physical attacks in an effort to conquer a neighboring country.
Multilateral Cyber Action Committee (MCAC) led by Next Peak’s Greg Rattray, Releases Joint Statement
Greg Rattray, Executive Director, and Ian Pelekis, Senior Cyber Risk Analyst at Next Peak helped form and drive the activities Multilateral Cyber Action Committee (MCAC). Recently, the MCAC brought together business and cyber advocacy organizations including the Business Executives for National Security; the Coalition for Midmarket Cyber Excellence; the Cyber Threat Alliance; the Cyberspace Solarium Commission 2.0; and the Institute for Security and Technology to issue a Joint Statement encouraging public private collaboration and support for the JCDC to improve the cybersecurity environment. Secretary Chertoff, Steering Committee Member of the new initiative stated: “The MCAC is a global committee focused on improving cybersecurity for a secure and open internet and wants to pursue deep public private partnership. In the United
CDAC Featured on “Click Here” Podcast Episode: “Rounding up a cyber posse for Ukraine”
They call themselves the Cyber Defense Assistance Collaboration (CDAC), and it is the brainchild of Greg Rattray, a former chief information security officer at JP Morgan Chase. For months, he has been helping build a kind of public-private partnership to combat destructive cyberattacks. This is the first time he’s speaking in depth about the initiative publicly.
CSIS Cyber Leaders Series: How Can Ukraine Win the Cyber War? A Conversation with Dr. Greg Rattray
What is it like to simultaneously fight a cyber war and a shooting war? How does Russia fight in the cyber domain, and how was Ukraine so resilient? What lessons can the United States and allies learn from that resilience?

Case Study of Cyber-Resilience in Wartime: Lessons from Ukraine’s Energy Sector
On January 25th, 2024, a major Distributed Denial-of-Service (DDoS) attack temporarily disabled the digital infrastructure of Naftogaz Group, Ukraine’s largest state-owned energy company. On the same day, an attack took other major companies offline—including the national postal service provider Ukrposhta,
Securing the Backbone of Artificial Intelligence: Protecting Data Centers
| By Seungmin (Helen) Lee | With the explosion in demand for artificial intelligence (AI) data centers to support the exponential integration of AI into businesses, operations, governments, and daily lives, the cybersecurity of AI data centers is becoming increasingly
Korea’s Evolving AI Regulations
| By Seungmin (Helen) Lee | As AI innovation and development took off in South Korea, so did unethical and unreliable use of the technology. The country’s AI legal framework that passed in December 2024 was designed to place guardrails
Explore featured insights from Next Peak's Intelligent Cyber Research
Intelligent Cyber Research: On Geopolitical Cyber Risk Across Industries
Most organizations now accept that geopolitical risk translates into cyber risks. Cyber incidents have ranked as the number one global business risk for multiple years, outpacing natural catastrophes, regulatory disruption,
Next Peak’s Intelligent Cyber Research offers new Geo Cyber Risk Index
Next Peak’s Intelligent Cyber Research (ICR), inspired by co-founder Greg Rattray’s vision to merge geopolitical intelligence with cyber insight, is ready to empower organizations to make informed, forward-looking decisions. On
Next Peak Launches “Intelligent Cyber Research”
For the last decade, Next Peak co-founder Greg Rattray has been developing an idea around his passion for the intersection of geopolitics and cyber. Today, as geopolitical risks are increasing