The short answer
A designated person or persons responsible for coordinating your response (internally and externally) Contact information for all relevant persons A process that employees can follow if they suspect something is amiss
Hello! If you are new to this series start with Day 1. For all those that are caught up let's jump into today's topic... have a plan.
A key component in making sure your business doesn't fail due to computer crimes is to have a solid plan. You may already have a disaster plan for physical events such as tornado or fire and your cybersecurity plan can be added as a subsection. At minimum the plan should include the following:
- A designated person or persons responsible for coordinating your response (internally and externally)
- Contact information for all relevant persons
- A process that employees can follow if they suspect something is amiss
- Contact information for a cybersecurity company you trust to assist - consider reaching out ahead of time to secure pricing while not in an emergency
- (if applicable) Contact information for a PR firm you trust - consider reaching out ahead of time to secure pricing while not in an emergency
Some more advanced but highly valuable contents include:
- A plan for recovery of any critical systems or applications
- (if applicable) A plan for temporary paper operations
If you really want to be prepared it is highly recommended that you test your response plan and improve the plan based on what worked or did not. As always, please don't hesitate to reach out and Happy Hunting!
