Police Cyber Incident Highlights Why Business Continuity Matters

Cyber incidents can disrupt much more than IT systems. This article looks at what organisations can learn from the recent Dyfed-Powys Police incident, including the importance of business continuity planning, tested recovery processes and clear communication.

A cyber incident affecting Dyfed-Powys Police has highlighted an important question for every organisation: how would you continue operating if your usual systems suddenly became unavailable?

In a statement published on 25 September 2026, the force confirmed that an incident identified on 14 September had disrupted some non-emergency systems. Online and email contact had temporarily been unavailable but had since been restored. Emergency response and the 999 and 101 telephone services remained unaffected.

The force said it had found no evidence that members of the public’s personal data had been accessed or compromised. However, investigations were continuing into whether staff information had been affected. The Information Commissioner’s Office had also been notified.

For businesses, the incident is a reminder that cyber preparedness needs to cover both protecting information and keeping essential services running.

Disruption Can Reach Beyond the IT Department

Consider how much of your daily work depends on email, shared documents, booking platforms or customer records. Even a temporary loss of access could delay decisions, interrupt services and leave employees unsure how to carry out their responsibilities.

For example, a business may still be able to deliver its services while its email system is unavailable. But how would customers make enquiries? How would staff confirm instructions or contact suppliers?

These are practical questions that should be answered before an incident occurs. The National Cyber Security Centre recommends identifying essential systems and information, assigning responsibilities and preparing an incident plan that remains accessible when equipment or systems are unavailable.

Recovery Needs to Be Tested

Having backups is important, but organisations also need to know whether they can restore the information and systems required to resume work.

A backup that has never been tested leaves uncertainty about what can be recovered and how long recovery will take. Businesses should identify which services need to return first and understand the systems those services depend on.

The NCSC recommends maintaining protected backups, testing restoration processes and storing recovery documentation separately from production systems. This helps organisations prepare for circumstances in which their usual network and resources cannot be trusted or accessed.

A useful exercise is to walk through a realistic scenario: your team starts work tomorrow and cannot access email or shared files. Who takes charge? Which activities continue? Who contacts your IT provider? Where is the recovery plan?

Clear Communication Is Part of the Response

The uncertainty surrounding a cyber incident can create its own difficulties. Employees may worry about their information, while customers want to know whether services are available.

A communication plan should identify who approves updates, how different audiences will be contacted and which alternative channels can be used if email is unavailable. The NCSC specifically advises businesses to identify the customers, suppliers and other partners they may need to contact during an incident.

Updates should distinguish confirmed facts from matters still being investigated. Organisations need to explain what they know, what action they are taking and when they will provide further information, without making promises they cannot yet support.

Making Preparedness a Business Priority

Cyber security and business continuity should be considered together. Leadership, IT, HR and operational teams all have a role in understanding what the organisation needs to protect and how it will respond to disruption.

The lesson for businesses is to make those decisions while there is time to plan, test and improve, rather than during an incident when systems may already be unavailable and pressure is high.

How AJC Can Help

At AJC, we help organisations take a practical approach to cyber security, business continuity and operational resilience.

Our team can support organisations with business continuity reviews, cyber incident response planning, risk assessments and desktop exercises that test how teams would respond to realistic disruption.

We can also help businesses identify critical systems and dependencies, review recovery and communication arrangements, and assess whether existing plans are practical enough to work under pressure.

By testing arrangements before an incident occurs, organisations can identify gaps, clarify responsibilities and strengthen their ability to continue operating when systems or services are disrupted.

If your organisation needs support reviewing its cyber resilience or business continuity arrangements, please contact AJC on 020 7101 4861 or email info@ajollyconsulting.co.uk.

Sources:

• Dyfed-Powys Police official statement
• NCSC: Prepare for incidents  
• NCSC: Prepare your technical recovery capability 

Image accreditation: Mike Erskine (July 2021) from Unpslash.com. Last accessed on 12 October 2026. Available at:
https://unsplash.com/photos/green-grass-field-near-body-of-water-during-daytime-3XLNv1nlT6A
Force crest of Dyfed-Powys Police from WikiMedia Commons. Available at: https://commons.wikimedia.org/wiki/File:Dyfed_Powys_Crest.jpg