By Bray Barnes
If a cyber attack hit your company, would your business leaders and employees know what to do, or who to contact? If you are not 100% sure, then you need to create or revise your Incident Response Plan (IRP).
An IRP provides guidelines of what to do in case of a cyber attack. It includes things like – who to contact, what to do, where to meet, how to communicate, when to engage outside support, and more.
However, due to complacency and/or lack of resources, many companies fail to update their IRPs over time.
As employees change roles, new hires come, or past employees leave, the effectiveness of an organization’s IRP will be impacted. This is especially true when these changes are at higher levels within an organization’s IT, divisional leadership, or C-suite executive ranks. Further, as we all know, cyber threats continue to evolve, becoming more intricate and sophisticated by the day.
So, how can you make sure your IRP is always up to date and well suited to the needs of your organization today and tomorrow?
Future Tech’s team of security experts and consultants can help you develop, test, and update your company’s IRP. We typically recommend that companies do a combination of tests for their IRPs at least once a year. Our recommendations include conducting employee written tests, small workshops and/or investing in full simulations organized with third-party cybersecurity experts.
Contact Future Tech to help your organization close its cyber security gaps, call 631-472-5500 or email firstname.lastname@example.org.
- Cybersecurity – How Law Enforcement Can Help Your Company
- Cybersecurity – Closing the Door on Common Vulnerabilities
ABOUT THE AUTHORS
Bray Barnes is the Director for the Global Center for Public Safety’s Institute for Cybersecurity. He previously was the Director, National Cybersecurity Institute, (NCI) Washington, DC, and is the Founder and Principal of Security Evaluation and Solutions Group, LLC that provided three unique Homeland Security cornerstones of service including Cyber Intelligence Analyst training. He has served as a member of the US Dept. of Homeland Security Cyber focus group, as Director, (Senior Executive Service) U.S. Department of Homeland Security (DHS), Washington, DC, directing the First-Responder Program, and as the Acting Chief Human Capital Officer with oversight to include all training and education for the Department’s 210,000 employees. He is a licensed attorney in New Jersey and Washington, DC, with thirty (30) years of experience in the legal profession representing various police agencies, corporations and financial institutions.