Illustrative stock imagery from Pexels. Images do not identify the people, premises or events discussed and do not imply endorsement.
Reviewed 26 October 2026. Original publication date retained: 2025-09-30.
On 2 September 2025 JLR confirmed that a cyber incident had disrupted retail and production activities and that it had shut down systems to mitigate the impact. Its 10 September update said some data had been affected. A 25 September update described parts of a controlled restart. These dated company statements support a discussion of dependencies and recovery; they do not prove which technical control failed or what a certificate would have prevented.
Questions to follow in an audit
- How are the service dependencies needed for recovery identified?
- Who decides whether a partial restart is ready and safe within the agreed scope?
- How are suppliers, users and other affected parties kept informed?
Connect the records with practice
Follow an exercise through dependency checks, the readiness decision, communication and review of unresolved issues.
These are illustrative audit trails, not findings about a named organisation, technical instructions or a guarantee of a particular result. The appropriate evidence depends on the activities, risks and agreed scope. The organisation remains responsible for its operations and legal obligations.
AAA provides independent certification audits. Confirm the applicable standard edition, scope and customer requirements before agreeing a programme. Request an indicative price or discuss your proposed audit.
Further reading: JLR statement,2September2025; JLR update,10September2025; JLR restart update,25September2025.