Security News > 2021 > October > How to Build an Incident-Response Plan, Before Security Disaster Strikes
A strong incident-response plan can help a company recover quickly and reduce incident costs.
When did the incident take place? Who discovered it? At what point did the security and IT teams intervene? Along with these steps, it is crucial to identify the type and nature of the incident and confirm that it is an actual incident.
Businesses need to ask whether their company's services should continue during the incident or if law enforcement needs to become involved, depending on the severity and sensitivity of the incident.
What worked efficiently, and what needs improvement? Taking the time to reflect and draft a response report will help your business better prepare should there be another incident.
Learning from the incident will also spark change and further investments in people, training and technology, to improve your organization's security stature overall.
Creating an incident plan is a time-consuming and daunting task, especially when it feels as if your company is invincible against attacks.
News URL
https://threatpost.com/incident-response-plan-security-disaster/175335/