Are you Prepared for a Breach?
You get a call from the FBI that your company’s computer network has been breached and some of your customer data has been compromised.
After catching your breath from hyperventilating, the next thing you should do is realize that you’re not alone. You aren’t the first company to suffer from a breach and yours won’t be the last.
In 2014, there were 783 tracked data breaches in the United States, according to the Identity Theft Resource Center. This represents an increase of 27.5 percent over the number of breaches in 2013 and a significant increase of 18.3 percent over the previous high of 662 in 2010.
The second thing to consider is that a breach does not have to be a business-ending experience if you take the right steps.
Malicious Event Detection
In any incident, the proper detection of the malicious event is paramount. Sometimes, the detection of the compromise is simple and can be found immediately. However, the detection of a more advanced attacker poking around your network can be difficult.
And, intruders can hang out on your networks for months or even years before they are detected. In fact, the first time many of these unwanted “visitors” are often discovered by a third-party, like the FBI or a bank, before your company’s staff notices it.
Cyber Incident Analysis
A key component of any incident is proper analysis because it’s impossible to make good decisions about the future of your cybersecurity without it.
Detailed analysis from skilled incident responders can point you to the root cause of the breach and provide you with a plan for remediation and future prevention.
Finally, you have to act on the plan. Failing to properly remediate after an incident will exponentially increase the chance that the breach will continue or occur again in the future.
With the sophistication of today’s adversaries, it is not a matter of “if” an incident will occur, it is a matter of when and determining the data at risk.
Sword & Shield’s analysts can help you both plan and prepare for how you will handle security incidents. Through a comprehensive offering of incident handling and forensic services, we have assisted thousands of customers of all sizes.