THE GREY ZONE

RICHARD STEPHENSON

THE GREYZONE

Why Britain and Europe Are Losing
the War They Don’t Know Has Started

Buy the bookRead an extract

ENDORSEMENTS & REVIEWS

To read this book and fail to act would be a conscious acceptance of avoidable risk.

Dr Michael C. McDonagh
Former Commander, Counter Terrorism Protective Security Command, Metropolitan Police

Have you read The Grey Zone?

THE BOOK

The attacks have
already started.
Are we ready?

Our everyday lives depend on systems we rarely see. What happens when they are taken away?

In The Grey Zone, Richard Stephenson examines how hostile states and criminal gangs exploit the space between peace and war — and what that means for the power, water, health, finance and food systems we rely on.

Drawing on public evidence, parliamentary testimony and four decades in crisis-exposed industries, he explores the decisions leaders must make to keep organisations, public services and the country functioning after disruption.

Book details & contents
FORMATPaperback
EXTENT192 pages
ISBN9781068605901

Published by Luna Ltd · First published 2026
Cover design by Jamie Stephenson

PART IThe Grey Zone

  1. The War That Dare Not Speak Its Name 5
  2. The Russian Playbook 15
  3. The Reckoning: 2024–2026 27

PART IIThe Uncomfortable Truth

  1. We Are Not Ready 35
  2. The Grey Zone at Machine Speed 45
  3. Defence and Response 51

PART IIIWhen Systems Fail

  1. The Silence After the Storm 61

PART IVCritical National Infrastructure

  1. Power and Water 71
  2. The NHS Under Siege 79
  3. The Financial System 85
  4. Food and Supply Chains 91
  5. The Cascade 99

PART VBuilding Resilience

  1. Thinking in the Grey Zone 107
  2. The Investment Imperative 113
  3. Government’s Role 119
  4. The Probability Trap 125

PART VIConclusion

  1. The Choice Before Us 133

Afterword: Where to Start · p. 137
Appendices, case studies, further reading and glossary.

Foreword by Dr Michael C. McDonagh.

IN ITS OWN WORDS

Defence tries to stop the attacker creating a crisis. Resilience decides what the crisis is allowed to become.

Chapter 6 · Defence and Response · p. 51

THE AUTHOR

Richard Stephenson, author of The Grey Zone

Richard
Stephenson

Four decades leading businesses through disruption. A practical view of what comes next.

Richard Stephenson is founder and CEO of YUDU, whose Sentinel platform keeps organisations communicating when their own systems are compromised. He has served as CEO and chairman of private equity-backed businesses across the UK, USA, Europe and Asia, and has held senior roles in public companies and technology start-ups.

His work centres on crisis communications, operational resilience and the growing exposure of critical national infrastructure to cyber and grey-zone threats. He writes and speaks on cyber risk, crisis management and technology strategy.

The Grey Zone is his first book. A practical handbook on crisis communications is in preparation.

YUDU Sentinel LinkedIn

Buy The Grey Zone.

Choose a bookseller or enquire about a signed copy.

Prices and delivery are set by each bookseller. You can also order through your local bookshop using the ISBN below.

Contact Richard

Press, review copies, interviews and speaking enquiries.
hello@thegreyzone.uk

Signed-copy enquiry

Tell us what you have in mind.

This form opens your email app with your enquiry addressed to hello@thegreyzone.uk. Review it and press send in your email app.

An enquiry does not place an order or take payment.

THE GREY ZONE / CHAPTER 6 / PAGE 51

Defence and Response

Defence tries to stop the attacker creating a crisis. Resilience decides what the crisis is allowed to become.

Two Different Problems

Let me be very clear about the distinction I’m making, because it is the single most important idea in this book.

Cyber defence is everything you do to keep attackers out, and to find them quickly if they get in: firewalls and network security, endpoint protection, intrusion detection, multi-factor authentication, awareness training, vulnerability and patch management, identity and access controls, security monitoring, threat intelligence, penetration testing, zero trust architecture.

This is essential work. Every organisation must invest in it.

Cyber response is everything you do to keep operating after defence has failed: a way to communicate that doesn’t depend on the systems under attack; a secure place for the crisis team to coordinate; access to the information needed to respond and rebuild; agreed relationships with forensic, legal and communications specialists; manual ways of running the services that matter most; tested procedures for making decisions under pressure; and a plan for keeping customers, suppliers and regulators informed when normal channels are gone.

Most organisations invest heavily in defence. Very few invest adequately in response. That gap is what turns a security incident into an existential crisis.

From The Grey Zone by Richard Stephenson.

YOUR PRIVACY

Privacy

This website promotes The Grey Zone by Richard Stephenson. For privacy questions or requests about information you have sent, contact hello@thegreyzone.uk.

The enquiry and review tools prepare an email using the details you enter, then open your email app so you can review and send it. The website does not store these form entries. You can also email us directly. Correspondence is handled using our Titan email service and used to respond to your enquiry, arrange a signed copy or consider your feedback. We keep correspondence only as long as needed for those purposes and any associated records.

Permission to quote a reader review with your name is optional and unchecked by default. Reviews are considered before publication. Contact us if you wish to withdraw that permission.

The site uses no advertising cookies, visitor analytics or mailing-list subscriptions. Cloudflare hosts and protects the website and may process technical information, including IP addresses and request details, to deliver and secure the service. Cloudflare may use strictly necessary security cookies when protecting a connection or checking a visitor. These are separate from advertising or analytics cookies. Cloudflare’s cookie information.

Bookseller links lead to external websites with their own privacy policies and checkout terms. This site takes no card payments; a signed-copy enquiry does not place an order. Copy buttons use your clipboard only when you press them.