Any organization, regardless of industry or size, that handles
or stores personal or sensitive information presents an opportunity
for cyber threat actors to exploit. Accessing, exfiltrating, and
ultimately leveraging this information – whether through sale
or extortion – is the goal of many cyber actors. The
hospitality industry is full of personal information, like email
addresses and birthdates, as well as potentially more sensitive
information, like payment card details, making it a lucrative
target.
So, how do organizations stay ahead of threats and ensure that
they are properly prepared to detect an incident?
Simply put, every organization should have an incident response
plan (IRP) that is tailored to the specific risks they face, and it
should be routinely tested and altered to keep pace with evolving
threats. The first time an IRP is put into use should not be during
an actual cyber attack.
