How to Prepare for a Cybersecurity Incident

Do you treat cybersecurity like any other risks in your organisation?

Every company regardless of their size should evaluate the likelihood and impact of cyber risks on their business in order to devise appropriate mitigation strategies and communication plans.

Communication is key to handle a security incident, and the last thing you want is having to figure out what to say and to whom while dealing with the incident itself…

Here are some things to consider in case of a security breach:
– Who needs to know?
– How should they be informed?
– How fast do they need to know?

Your customers, suppliers, partners and perhaps other stakeholders would have to be contacted if their data is compromised. What you will tell them will be critical.

Here are the things you can do to prepare for such a situation:
– Drafting email templates for each type of stakeholders.
– Knowing a PR specialist that you can reach out to for help if an incident occur
– Finding alternative ways to contact your stakeholders if your system is restricted (as in a ransomware attack)

Take good care of the way you communicate:
– Don’t wait
– Keep it consistent
– Stick to the facts and don’t speculate
– Avoid emotive terms
– Don’t be too technical

Understanding your exposure to the cyber risks by Identifying the different type of incidents your business might be exposed to can help you prepare effectively.

Do you need help identifying the vulnerabilities of your system? We can conduct a cybersecurity assessment for you.