Incident preparation begins before a cyber incident occurs, and the impact of an incident on the business often continues well after remediation.
How do you build an effective incident response plan?
SecureWorld PLUS instructor Brian Engle has been building incident response plans for years. This includes during his time as the former CISO for the State of Texas.
He's leading an online training course on how to construct incident response programs, how to enable those programs, and how to get them to be successful on an ongoing basis.
Listen to Brian Engle as he discusses two key things your incident response plan must include:
1. Communication in an incident response plan
"Fundamental is communication, communication within the team, executive leadership, and setting expectations and the type of thing that should be done in the course of detection, what you know, what you don’t know as you learn more and keeping that flow of information going so everyone is prepared."
2. Coordination in an incident response plan
"Coordination is another piece of it, so many organizations have a very broad supply chain or network of organizations they work with to enable business functionality. So coordination is sometimes internal, but sometimes includes external partners. When you’re attacked as an organization, it may not be on the resources that sit within your line of sight, so being able to coordinate in a more diverse fabric of companies that enable business functionality is just really, really important as well.”
Incident response plan steps
If you are wanting a better understanding of steps to building an incident response plan, participate in our SecureWorld PLUS course live or on-demand.
"Building and Evaluating an Effective Incident Response Plan" includes three 90-minute sessions, and you will earn 5 CPE credits.
See more details on what the online incident response building and evaluating course will cover, and register here.
