| |
Welcome to the Research Assistant Weekly Newsletter - a subscriber-only resource for insight into emerging compliance challenges, details on peer calls, and links to new Research Assistant reports, documents, tools, and more.
During this week’s Cyber Incident Response Plan Workshop we dove into the area of, “preparedness”. Outside of having a plan how does a company truly prepare for a cyber event. Here are some of the great ideas curated by our peer group.
-
Create and maintain an inventory list of all your assets, including but not limited to: hardware, software, systems, services, clean machines.
-
Determine who and when this inventory list will be updated and audited.
-
Ensure offshore locations and remote employees are considered.
-
Store this inventory list in multiple forms with at least a printed copy secured offsite.
-
Identify the “critical” assets required to get operations running again and ensure you have backups that are clean, or an outside company that can stand up clean equipment on your behalf.
-
Determine communication method. In the event you are faced with a cyber incident you may not be able to communicate through your traditional channels. You should consider a group notification outside of your company that has an inconspicuous name so it’s not easily detected by hackers. A peer shared that her company set up an Incident Response group within WhatsApp to solve for this.
-
Define roles and responsibilities within each area of your response plan and meet on this regularly throughout the year so it doesn’t get lost in the day to day operations.
Our next Cyber Incident Response Plan Workshop will be held during the first 20 minutes of our RA Peer Call, April 15th.
Documents and Crowdsourced Materials:
Top Reads:
Upcoming Webinars/ Other Announcements:
|
|
|
|
