Mitigation Steps of an Incident Response Plan

Power Off: Make sure you segment and depower the machine in question. Don’t forget to unplug the ethernet cord. It’s important to note that some information security professionals would argue that powering off the machine is the opposite of what you should do. The truth is that it really depends on who is responding to the threat. A trained infosec professional should not power off the machine, as they have an actual grounding in threat intelligence and may be able to identify the potential incident via the short-term memory on the machine. But your front-line workers shouldn’t have to shoulder that burden of criticality. The best bet is to get them to take action to mitigate the spread and prevent further damage.
Don’t Delete: This is the hardest rule to follow because it goes against your instinct. If you delete the file that you believe is malicious, you will delete the trail that allows a forensic investigator to determine the root cause of the incident. This could have massive ramifications with regards to a legal situation like a lawsuit or insurance claim. Segment and isolate the machine and power it down.

Your marketing folks should have a “break glass in case of emergency” kit ready to go in the event of a cybersecurity incident. It should include the following elements.
Social Media Posts: Communicate your knowledge of the issue and your intent to investigate and protect.
Email to Customers: Draft a message that informs your customers and supply chain of the incident.
Email to Employees: Draft a message to send to employees before the mass communication goes out.
Email to Shareholders: Draft a message to inform shareholders, if applicable.
Communications Schedule: Create a schedule of how often your team is going to update and follow up with the customers and supply chain network moving forward.
Call to Action: Set down the call to action and back away. You don’t need your customer base to do anything other than be aware and be vigilant.

More Info: a+ certification jobs

Comments

Post a Comment

Popular posts from this blog

DDoS for hire services

The service is also offering 5%, 7%, 10% and 15% discounts to prospective customers, with a return policy based on the remaining time from the originally purchased package. The service profiled in this post, is the tip of the iceberg when it comes to the overall availability of DDoS for hire managed services within the cybercrime ecosystem. This fierce competition prompts for unique client acquisition tactics, such as offering complete anonymity throughout the purchasing and post-purchasing process in order to ensure that anyone can request any target, including high profile ones, to be attacked. Moreover, although the service is undermining the OPSEC (operational security) of the proposition by advertising on public forums, the business model of the competition is often driven by invite-only sales, where prospective customers are trusted and verified as hardcore cybercriminals with a significant credibility within the cybercrime ecosystem. These competing services even offer the po
Read more

Reasons You Should Care About CompTIA A+

If you’re not already convinced that CompTIA A+ is a great way to launch your IT career, listen to what Zach Hill of I.T. Career Questions has to say. When the CompTIA A+ Core Series (220-1001/220-1002) launched earlier this year, he identified five things that excite him about the certification and why he thinks it’s relevant to today’s entry-level IT jobs, like help desk technician and technical support specialist. "In my opinion, CompTIA has really raised the bar with the new A+ certification,” Hill said in his video. “They have set a new standard while still keeping in mind that this exam is designed and developed for those who are seeking entry-level job roles.” Highlights of the CompTIA A+ Core Series Scripting: You won’t need to become a programmer or know coding inside and out, but you’ll need to understand the basics of how scripting works and the principles of scripting language. Cybersecurity: The CompTIA A+ Core Series has increased its coverage of cybersecurity, incl
Read more

Most IT a+ certification job opportunities

If you are an IT Professional working in an area like Computer Security or Networking, there are lots of certifications to showcase your expertise. In this article, you will find the top 3 CompTIA ®  certifications that will make you a great asset to any company. Cybersecurity is one of the most important focal points for IT departments these days in the wake of rising cyber-attacks that include malicious ransomware attacks, zero-day viruses etc. These attacks can cause firms millions of dollars in damage in terms of data loss and system downtimes. Therefore, firms these days are looking to recruit the best IT talent in order to make the security of their systems and networks more robust. For professionals looking to build a career in cybersecurity by capitalizing on this rising demand for relevant talent, CompTIA offers a dedicated certification path for cybersecurity. These certifications comprise of associate and advanced level certifications and if you want to start out on
Read more