It can be stressful enough if you suffer a cybersecurity breach, even with a tested and proven Incident Response Plan in place. It is crucial that you contain the damage to your network and systems, remove the malware as soon as possible and get your systems back up and running so that you minimise the financial impact on your business. You also need to communicate both internally and externally to let your employees know what is going on and keep your customers updated so that you minimise the reputational damage to your business.
If you don’t have an Incident Response Plan in place you will need to consider:
- How do you identify that you have been breached?
- Who in the organisation needs to be involved and what will they need to do?
- How do you isolate network devices/systems to avoid infecting the rest of the network?
- How do you remove the malware and restore the systems? Is there a Disaster Recovery site that you can use? Are there backups that can be restored? Do you need to order replacement equipment? How soon can it be delivered?
- Who do you need to notify? What do you need to tell them? How do you contact them? How often should you communicate with them? You will probably need to notify the Information Commissioner’s Office (ICO) about the breach. You may also need to involve the Police if a criminal act has been performed.
- Once the incident has been resolved how do you decide what you need to do so that you don’t suffer from a similar breach in the future?
Getting help and support
I’ve had a breach – I need help
A lot of companies don’t have the necessary tools in place to effectively respond to a cyber attack. We have teamed up with Cynet360 to offer a cost effective, fast and efficient way to respond.
Please contact us on +44 (0)203 371 9178 (and select the Support option) if you need support. For more details you can also email us at support@enterprisered.com.
I need help with an Incident Response Plan
It helps if you have an up to date Incident Response Plan, so that you can quickly respond with specific actions if a breach occurs.
We can provide Consultancy and Support to help you create and test your Incident Response Plan.
Please contact us on +44 (0)203 371 9178 (and select the Sales option) for more details or email us at sales@enterprisered.com.
I need help to communicate with stakeholders
If you suffer a breach it is important that you communicate regularly with all involved parties. This is the best way to minimise the damage to your reputation.
We can provide the services of a Communications Specialist to help and support you during the incident.
Please contact us on +44 (0)203 371 9178 (and select the Sales option) for more details or email us at sales@enterprisered.com.