When Chernobyl first entered a state of emergency, the only thing that was known was that nobody knew what was happening. Instead of reacting immediately, individuals disagreed as to exactly what they were facing – whether the reactor was still intact, or whether more something more severe had actually happened. The word of those who had first-hand information was ignored, and disruptions in critical communications services prevented first responders from properly preparing for what they’d face, according to Security Boulevard. This confusion turned what was already a serious incident into a famous disaster.
Such breakdowns in communications are common in disaster recovery and incident response situations. While the massive majority of companies will never face anything like Chernobyl, the lessons learned from the failed response can still help to inform incident response planning. Organizations should ensure:
- Communication is open between team members
- Roles are well defined, and people understand their key tasks
- Testing of plans is rigorous and realistic
- Any team member speaking to the media is briefed about key technical information, and supported by technical experts as needed.
- Incidents are reviewed afterward to ensure the response was effective, and gaps in plans identified.
Source:
https://securityboulevard.com/2020/02/chernobyl-and-its-cyber-lessons-part-2-incident-response/
