As many companies continue to struggle with when and how to bring employees back into the office, IT and cybersecurity departments are having to quickly reconfigure how they perform training for and execution of incident response. A recent survey from Immersive Labs gives an idea of the scale of the challenges faced observing that of the 402 respondents, according to an article in Infosecurity:
- 20 per cent found it impossible to effectively use remote resources for crisis response
- 25 per cent had to run crisis exercises without the participation of senior leadership
- 80 per cent ran exercises without members of the communications teams
While not encouraging in overall numbers, some organizations have been able to work around limitations. Heath Renfrow, director and vCISO at Crisis Group, observes that many companies have always been unable have all key personnel in the same space for incident response, and “so conducting tabletop and disaster recovery exercises with everyone remote may be an adaptation, but it isn’t an insurmountable one.” Similarly, Joseph Carson, chief security scientist and Advisory CISO at Thycotic, told Infosecurity that since “security breaches tend to happen when people are not in the office,” companies should consider the current remote working environment as “a great time to test your incident response and business reliance.” Rather than deferring testing of incident response, organizations should instead ramp up their plans to adapt to what may become the new normal.
Source:
https://www.infosecurity-magazine.com/news-features/incident-response-remote-staff/
