Cybersecurity Incident Response – Tips From The Trenches

A cybersecurity incident can be challenging and costly for any organization, regardless of size, industry or cyber maturity. Timely advice and guidance from experienced incident response legal counsel can make the process easier and more successful.

Following are some generally applicable practical suggestions, based on real-world experience, for responding to a cybersecurity incident.

• Hope is not a plan. Incident response is usually easier, less expensive and more effective if the incident response team has a pre-existing, written incident response plan. In many circumstances, there is a legal requirement to have a suitable incident response plan that is consistent with regulatory guidance and industry best practices. The best incident response plans are short and straightforward, specify practical tasks and achievable outcomes, assign accountability to specific team members, and provide guidance (including communications guidelines) to help the incident