Marc Rocker
Remember, Remember... Your Cyber Security This November
Every year on 5th November, the country celebrates the failure of one of history’s most infamous conspiracies. Bonfires blaze, fireworks light the sky, and the story of Guy Fawkes and the Gunpowder Plot is retold across the UK.
More than 400 years later, the plot offers an unexpected lesson for modern organisations navigating cyber risk. While the methods have changed dramatically, the objectives remain surprisingly familiar: gain access, remain undetected, and cause maximum disruption.
The Original Plot
In 1605, a group of conspirators sought to destroy the Houses of Parliament by hiding 36 barrels of gunpowder beneath the House of Lords. Their intention was not merely destruction, but widespread political disruption and instability. The plan was carefully orchestrated. Access was obtained, the explosives were concealed, and the conspirators waited for the perfect moment to strike.
In short, it followed a planned attack lifecycle sequence:
Access → Concealment → Waiting → Activation → Impact
Ultimately, the plot failed for one simple reason: it was discovered before it could be activated.
Today's Threat Landscape
Modern cyber attacks follow a remarkably similar pattern.
Threat actors rarely launch spontaneous attacks. Instead, they spend time gaining access to systems, moving through networks, planting malware, stealing credentials, and studying their targets. Often, they remain hidden for weeks or even months before launching ransomware, exfiltrating data, or causing operational disruption.
The attack lifecycle frequently follows a familiar sequence:
Access → Concealment → Waiting → Activation → Impact
Just as the Gunpowder Plot relied on secrecy and timing, today’s cyber criminals depend on remaining undetected until the moment they choose to act.
Detection Changes Everything
The Gunpowder Plot wasn’t prevented because the threat didn’t exist. It was prevented because the warning signs were recognised and acted upon.
The same principle can apply to cyber security.
Organisations that invest in proactive monitoring, threat intelligence, endpoint detection and robust incident response capabilities, can significantly improve their chances of identifying malicious activity before a crisis unfolds.
Trust Can Become a Vulnerability
The conspirators behind the Gunpowder Plot relied on access, knowledge, and coordination, all similar opportunities that cyber criminals look to exploit today.
Whether through compromised credentials, third-party suppliers, or rogue insiders, attackers frequently leverage trusted relationships to bypass traditional security controls.
For businesses, this serves as an important reminder that cyber security is not solely a technology issue. Effective governance, access management, staff awareness, and supplier oversight all play a critical role in reducing exposure.
Aiming for Maximum Impact
One reason the date and location was chosen as a target was because it concentrated the country’s most influential leaders in a single location at the same time. The conspirators understood how to maximise the impact of a single event.
Cyber criminals think in much the same way.
Rather than targeting individual systems, attackers often seek opportunities that create widespread disruption. Cloud outages, supply chain attacks, managed service provider compromises, and widely exploited vulnerabilities can affect hundreds or even thousands of organisations simultaneously.
Understanding these accumulation risks has become increasingly important for businesses of all sizes.
If The Gunpowder Plot Had Succeeded, The Consequences
Would Have Been Catastrophic
Whilst cyber incidents typically don’t involve barrels of gunpowder, the impact can still be severe. Business interruption, regulatory investigations, financial loss, reputational damage, legal costs, and ransom demands can all place significant pressure on an organisation.
Cyber insurance is not a substitute for strong cyber security practices, but it can play an important role in recovery. Depending on the policy selected, access to specialist incident response teams, legal advisers, forensic investigators, crisis communications support, and financial protection can help organisations respond more quickly and effectively if incidents occur.
A Modern ``Remember, Remember``
The enduring lesson of the Gunpowder Plot is not the attack itself, but the fact it was uncovered before disaster struck and we believe cyber resilience is much the same.
It’s not about predicting every threat or preventing every attack. It’s about identifying vulnerabilities, detecting malicious activity early, minimising impact, and ensuring your organisation can recover quickly when incidents occur.
This Bonfire Night, while we’re all busy remembering the Gunpowder Plot, it’s worth asking one question:
If a threat was already hiding within your organisation, would you know before it detonated?
Marc Rocker
Cyber Insurance Executive, Brown & Brown
Marc cuts through the technical jargon to explore the real cyber threats facing businesses of every size. From protecting a business’s data and operations to understanding what happens when an incident occurs, Marc will share practical, straightforward guidance to help businesses strengthen their cyber resilience, manage risk and be better prepared should the worst happen.
Marc help businesses unravel the myths & misconceptions around Cyber Insurance and to build risk transfer solution to protect themselves.
“Cybercrime isn’t just an IT problem – it’s a business risk. How prepared are you?”