What’s an Incident Response Plan, Again?

A company is never able to predict when or by what means it may be targeted in a cyberattack, but it can prepare a robust response plan in the event of a breach. That response – contingent on the team, corporate processes and the technology that supports them – will ultimately determine whether a company ends up on the front page of The New York Times next to Equifax with its clients’ information on the Dark Web.

The following scenario provides a look behind the curtain at a company that has just learned that their cybersecurity has been compromised as a result of a targeted malware attack. The real-world dialogue showcases the consequences of not having a well-prepared incident response plan and the chaos that ensues when trying to protect the company while coordinating with various support agencies, which leaves the business vulnerable and results in a disastrous reputational hit.