Recommended Practices For Drafting And Reviewing Your Incident Response Plans

In today's digital landscape, cyber incident threats are inevitable. Organizations must be prepared to respond effectively and efficiently when a cyber incident happens. According to the National Institute of Standards & Technology (NIST), an incident response plan (IRP) is a document that provides instructions for an organization's response to a cybersecurity incident. Cybersecurity incidents include, but are not limited to a data breach, ransomware attack, data leak or business email compromise. An IRP guides organizations in detecting and identifying a cyber incident, responding to a cyber incident, mitigating consequences and minimizing losses related to a cyber incident. An IRP also guides organizations in preventing the reoccurrence of a cyber incident, as well as correcting potential vulnerabilities and restoring an incident-impacted system.