Category Archives: Incident Response Plan

Thriving in Chaos: How Cyber Resilience Works

Posted on by

In cybersecurity as in most jobs, problems don’t happen one at a time, you’re bound to have a few at once. Speakers at the RSA Conference 2021 talked about this in terms of maintaining cyber resilience in chaos. So, what does the buzzword ‘cyber resilience’ really mean? And why is it important to be able […]

The post Thriving in Chaos: How Cyber Resilience Works appeared first on Security Intelligence.

Continue reading Thriving in Chaos: How Cyber Resilience Works→

Avoid Blind Spots: Is Your Incident Response Team Cloud Ready?

Posted on by

The year 2020 — with all its tumult — ushered in a massive shift in the way most companies work. Much of that transformation included migrating to cloud, with some statisticians reporting that a full 50% of companies across the globe are now using cloud technology. In many ways, that’s good — cloud holds several […]

The post Avoid Blind Spots: Is Your Incident Response Team Cloud Ready? appeared first on Security Intelligence.

Continue reading Avoid Blind Spots: Is Your Incident Response Team Cloud Ready?→

“Our IT teams have an Incident Response Plan. We’re prepared for a cyberattack.” Maybe not.

Posted on by

Phishing attacks, insider threats, denial of service disruptions, malware and ransomware — cybersecurity incidents like these happen on a daily basis. For most of these incidents, the onsite IT team will remediate based on a pre-developed plan and process. And for many of these incidents, that’s a solid approach. But those incident response plans and […]

The post “Our IT teams have an Incident Response Plan. We’re prepared for a cyberattack.” Maybe not. appeared first on Security Intelligence.

Continue reading “Our IT teams have an Incident Response Plan. We’re prepared for a cyberattack.” Maybe not.→

Ransomware Attack Response Should Extend Beyond Money to Your Team’s Morale

Posted on by

A ransomware attack can hurt employee morale in unique ways compared to other types of attacks. Depending on how the company reacts, employee morale can drop, and security teams become less effective. While recovering from any malware incident can cost a significant amount of money, too many companies respond to ransomware by funding threat actors […]

The post Ransomware Attack Response Should Extend Beyond Money to Your Team’s Morale appeared first on Security Intelligence.

Continue reading Ransomware Attack Response Should Extend Beyond Money to Your Team’s Morale→

What Every Incident Response Plan Needs

Posted on by

A record number of digital attacks occurred in 2020. The FBI’s Cyber Division received as many as 4,000 complaints about digital attacks in one day early last year. That’s 400% higher than what the Cyber Division received the previous year. This growth in the volume of digital attacks underscores why you need to have an […]

The post What Every Incident Response Plan Needs appeared first on Security Intelligence.

Continue reading What Every Incident Response Plan Needs→

Combating Sleeper Threats With MTTD

Posted on by

During the SolarWinds Orion supply chain compromise, threat actors lurked in the victim’s network for more than a year. Discovered by FireEye in December 2020, the earliest traces of a modified SolarWinds Orion go back as early as October 2019. Although these early versions did not contain the malicious backdoor (this was added in March […]

The post Combating Sleeper Threats With MTTD appeared first on Security Intelligence.

Continue reading Combating Sleeper Threats With MTTD→

The Next-Gen Cyber Range: Bringing Incident Response Exercises to the Cloud

Posted on by

At IBM X-Force, we keep our customers on the cutting edge of cybersecurity experiences, centered around incident response, and these include responding in cloud native environments. What is cloud native? It is a concept that grew out of the astonishing and rapid transition to cloud computing and is a fundamental shift in how applications and […]

The post The Next-Gen Cyber Range: Bringing Incident Response Exercises to the Cloud appeared first on Security Intelligence.

Continue reading The Next-Gen Cyber Range: Bringing Incident Response Exercises to the Cloud→

The Future of Cybersecurity: How to Prepare for a Crisis in 2020 and Beyond

Posted on by

When it comes to the future of cybersecurity, an ounce of prevention is worth far more than a pound of cure. According to the Ponemon Institute and IBM Security’s 2020 Cost of a Data Breach Report, enterprises that designated an incident response (IR) team, developed a cybersecurity incident response plan (CSIRP) and tested their plan […]

The post The Future of Cybersecurity: How to Prepare for a Crisis in 2020 and Beyond appeared first on Security Intelligence.

Continue reading The Future of Cybersecurity: How to Prepare for a Crisis in 2020 and Beyond→

Chaos Engineering: Building the Next Generation of Cyber Ranges

Posted on by

In one of our past posts on the same subject, we discussed how to apply chaos engineering principles to cyber war-games and team simulation exercises in broad brush strokes. In short, ‘chaos engineering’ is the discipline of working and experimenting with new features and changes on a system that’s already in live production. The purpose […]

The post Chaos Engineering: Building the Next Generation of Cyber Ranges appeared first on Security Intelligence.

Continue reading Chaos Engineering: Building the Next Generation of Cyber Ranges→

Deciphering Between Incident Management and Crisis Management

Posted on by

Cyber threats come in many forms and can severely impact business operations, brand reputation, financial standing and even lead to a lawsuit. Organizations must prepare to respond and manage cyber events at different organizational levels to limit their damage and accelerate recovery. Most businesses focus on incident management or crisis management to react to cyber […]

The post Deciphering Between Incident Management and Crisis Management appeared first on Security Intelligence.

Continue reading Deciphering Between Incident Management and Crisis Management→