Every business is unique and
has varying needs and
degrees when it comes to
cybersecurity and
information security
As part of your insurance
and/or compliance policies,
you should develop an
Incident Response (IR) plan
If a data breach is suspected
or detected, confirm what
information is exposed and
take action in accordance
with your IR plan
Ensure communication channels
and organizational
procedures and
responsibilities are in
place and simulated
regularly to ensure
readiness to take action and
stop a breach when it occurs
Depending on the nature of a
breach, only parties who
need to know should be made
aware to avoid any potential
additional, accidental
information leaks
Notify the authorities, those
impacted, your legal
counsel, and prepare for
recovery phase
Begin the secure process of
relaunching your systems
with updated security
measures in place to
mitigate a future, repeat
attack
|