Prepare to fail: creating an incident management plan
Tracey Caldwell · Computer Fraud & Security · 2012
No organisation can be absolutely confident of preventing a cyber-attack or data breach, yet few have a comprehensive incident management plan. Some organisations are improving their mechanisms for advising the authorities of breaches and brushing up their public relations. Others are enhancing their event logging technology or security forensics. Few are covering all bases, able to handle an incident efficiently and effectively, minimising any damage and learning lessons. Tracey Caldwell reports on the preparations organisations should be making to handle incident response. No organisation can be absolutely confident of preventing a cyber-attack or data breach. Yet few have a comprehensive incident management plan. Some organisations are improving their mechanisms for advising the authorities of breaches and brushing up their public relations. Others are enhancing their event logging technology or security forensics. Few are covering all bases, able to handle an incident efficiently and effectively, minimising any damage and learning lessons.