With the growth in attacks designed to encrypt or otherwise seal away data, the importance of maintaining an effective cyber recovery plan is growing. Supplementing and extending disaster recovery plans, these cyber recovery plans are vital for allowing rapid return to operation of critical systems, and for restoration of access to key data and information, by giving the organization a safe backup from which to work in the event the primary source has been lost or otherwise compromised.
When preparing a cyber recovery plan, five key points should be considered:
- The identification of all resources, hardware, and software that is used;
- The establishment of control over access to networks and devices;
- The deployment of tools capable of monitoring computers for unauthorized or suspicious behaviors;
- The preparation of a response plan, for both containing any potential attack, as well as notifying key stakeholders or customers of potential threats and disruptions; and
- The recovery of systems, once any attack is contained.
Source:
https://tdwi.org/articles/2021/05/20/dwt-all-smart-cyber-recovery-initiatives.aspx?m=1
