When it comes to cybersecurity, a lot can be learned from the experiences of others. With significant breaches becoming regular events in the news, there are a lot of companies out there whose responses can be mined for knowledge, and to help build your own plans for how to handle an attack, according to The Financial Times.
More than anything else, preparation is key. When an attack is occurring, or a breach has been uncovered, it’s too late to start planning then. Instead, companies need to show that they’re ready, for the benefit of both those internal to and external to the organization. From identifying who is responsible for the initial response, and ensuring reporting lines are clear and understood and include all key stakeholders, down through contacting critical third parties and regulators, and on through notifying those who have been affected in a timely manner, the number of steps in a plan can be considerable, and missing any of them could result in significant losses in both finances and reputation. By building these things out in advance, and looking to successful (and unsuccessful) responses from other organizations, you can give your company the best chance to make it through that next cyberattack with the least damage.
Source:
https://www.ft.com/content/fb59759d-2393-4744-937d-4076ab173857
