A growing majority of extortion attacks never encrypt anything. Instead, attackers steal information and threaten to publish it. Small and midsize businesses face encryption-less extortionRead More
Leave a commentThere is a persistent myth in cybersecurity that meaningful breaches are the work of exceptional adversaries. Somewhere out there is a mysterious cadre of highlyRead More
Leave a commentAccording to IBM’s “Cost of a Data Breach” report, organizations typically take an average of 204 days to identify a breach and 73 days toRead More
Leave a commentYou already know that cybersecurity is no longer an IT afterthought; it’s a vital line of defense for any business. But a strong defense is about more than firewalls and software updates–although those are important. Here’s the irony: your greatest cybersecurity weakness is also, potentially, your greatest strength: it’s your people.
ALERT! ALERT! This is not a drill! You have an alert that was identified as legit, was pressure-tested, checked, and escalated to containment. Something is truly up!
Now what?
No two incident response plans are alike. What your plan looks like will depend on many variables, from the size of the company, the scope of business, regulatory needs, to the company culture.
You already know you need an incident-response plan. But what should it look like? What’s involved in creating such a plan? I’ll help you get started.