Your incident response plan must be ready to go under all the time, as you can never predict when something is going to happen that demands it. And if it’s not ready to go, the costs to your company can be great, through loss of data, money or reputation.
To help keep it ready, consider working (and re-working) through these three key steps, according to ThreatPost.
- Perform an overall assessment, looking into the skills of those who would be called in the event of an incident, the conditions under which the plan would be invoked, and how communications would be handled both internally and externally.
- Create partnerships to help fill gaps in expertise or resources, whether through the use of external services, or with internal teams that can help support based on need, including communications and legal teams.
- Test the response plan regularly, through a variety of exercises and events, to make sure everyone knows their roles, their contacts, and how to react well before an actual incident occurs.
By keeping people engaged in these steps, you can help ensure your team is ready to react the next time they’re needed.
Source:
https://threatpost.com/3-guideposts-incident-response-plan/176019/
