U.S. Department Of Justice Issues Guidance For Cyber Incident Planning And Response

In April 2015, the U.S. Department of Justice ("DOJ") issued guidance to assist organizations to prepare for and respond to cyber incidents. The guidance discusses the important steps that an organization should take before, during and after a cyber incident. The guidance is intended for smaller, less well-resourced organizations, but is useful for larger organizations as well.

CYBER-RISK MANAGEMENT

Cyber-risk management is an increasingly important challenge for organizations of all sizes and kinds. Cyber-risk is the risk of damage, loss and liability (e.g. financial loss, business disruption loss, loss to stakeholder value, reputational harm and legal noncompliance liability) to an organization resulting from a failure or breach of the organization's information technology systems. Cyber-risk can result from internal sources (e.g. employees, contractors, service providers and suppliers) or external sources (e.g. nation states, terrorists, hacktivists