category:

Incident Response

Article

GLBA Safeguards Rule Updates

Organizations are being encouraged to assess their current information security programs now and structure the necessary plans to achieve GLBA compliance with the amended requirements.

GLBA
Updates to the Safeguards Rule about the GLBA Safeguards Rule Updates
Article

Incident Response: The Critical Role of the Help Desk

Help desk and service desk personnel provide much more than just basic troubleshooting and technical support. With appropriate training, they can also make a significant impact in the prevention or early identification of security breaches.

Incident Response
Help Desk's Incident Response Role about the Incident Response: The Critical Role of the Help Desk
Article

Top 3 Things to Know When Responding to a Crisis

Your organization has a Crisis Management Plan in place that staff and stakeholders have practiced and improved over time. The Plan answers the “Top 3 Things”: Who, What/When, and How of response actions at the organization and brings order to unexpected events.

Incident Response
Crisis Response Considerations about the Top 3 Things to Know When Responding to a Crisis
Article

Tips for a Remote Cybersecurity Tabletop

Are you confident your staff knows what to do in the event of a ransomware attack? One of the best ways to confirm your team is prepared is by testing your current Incident Response Plan in a facilitated “tabletop exercise".

Incident Response
Read More about the Tips for a Remote Cybersecurity Tabletop
Article

Incident Response: Key Players in a Tabletop Exercise

Gathering everyone in one room for a discussion-based tabletop exercise can be a good way to test your plan and verify that all appropriate staff members understand their individual roles and responsibilities.

Incident Response
Tabletop Exercise Key Players about the Incident Response: Key Players in a Tabletop Exercise
Article

NIST SP 800-171 Framework Series: Incident Response

Incident Response is one of the 14 requirements outlined in the NIST SP 800-171 and this article covers Requirement 3.6 in more detail.

Incident Response
Read More about the NIST SP 800-171 Framework Series: Incident Response
Article

Phishing Your Own Users

Phishing your own users is a great exercise to gauge awareness and how well your employees can identify a phishing email in a controlled environment. Promote the habit of knowing and understanding the way phishing messages work to help them build success on how to react appropriately to phishing messages.

Phishing
Read More about the Phishing Your Own Users
Article

NIST SP 800-171 Framework Series: Audit and Accountability

The third family of controls within the NIST SP 800-171, Audit and Accountability, is critical in both the prevention and detection of data breaches. Comprehensive and accurate system logging can significantly reduce the impact of a potential breach.

NIST Framework
Read More about the NIST SP 800-171 Framework Series: Audit and Accountability
Article

IT Disaster Recovery Planning: Is Your Plan Adequate?

Hurricanes, earthquakes, fires, floods, terrorist attacks, and cyberattacks…. Unfortunately, these incidents could happen to your organization at any time, and are for the most part beyond your control. However, you can control how well your organization is equipped to respond

Incident Response
Read More about the IT Disaster Recovery Planning: Is Your Plan Adequate?