Cyber Pain Points

Originally published by Peter S. Vogel.

A recent report indicated that IRPs “are frequently developed from within departmental silos, for example, within the organization’s IT security function, and do not address the considerations of business units or cross functional areas needed to coordinate and operate together during a response. This not only leads to an uncoordinated response effort, but discourages buy-in from all business units that are expected to be involved in the response effort.”  Delta Risk issued its April 2016 report entitled “Top 10 Cyber Incident Pain Points: Are You Prepared?” which identified as # 2 on the list is “Incident response plans lack cross-organizational considerations and buy-in” which included these observations:

Integrated incident response plans, which account for the differences in the way business units respond, or those organizations which have standardized incident response across their functional business areas, are typically more successful during incident response scenarios.

Here’s the list of all 10 Pain Points:

1. Lack of a cross-functional “incident commander” to coordinate response across the organization
2. Incident response plans lack cross-organizational considerations and buy-in
3. Limited data classification guidance to help determine severity and guide incident response activities
4. Ill-defined processes (aka “pre-thought use cases”) for responding to high impact incidents
5. Lack of defined checklists or step-by-step procedures, including contact lists for response
6. Lack of consideration of the business impact when determining courses of action for response
7. Ill-defined or mixed use of event and incident taxonomy between responders
8. Lack of defined thresholds between events and incidents to aid in decision making
9. Limited or lack of pre-determined (aka “pre-canned”) external communication statements
10. Lack of training and exercise of “memory muscle” for the most likely or high risk incidents

It’s critical that all businesses to better plan their IRPs, training, the other 8 Pain Points!

Curated by Texas Bar Today. Follow us on Twitter @texasbartoday.

from Texas Bar Today http://ift.tt/2bxYNuB
via Abogado Aly Website