Imagine an NFL team coming out on the field without a game plan that has been scrutinized, practiced and tightly scripted; it’s pretty much unthinkable. Despite this understanding, many organizations wait to react to cyber-attacks until they actually happen, and the ensuing confusion and panic can compromise your organization even further.
Prepare ahead of time, isolating priorities, people, resources, contingencies and process that will be needed when an attack occurs. Practice and exercise your plans continually. The first hours of an attack are critical; and demand a very well thought out response that harnesses the collective efforts and response of the entire organization. You will have to plan that an attack can take place anytime and from multiple attack vectors; you don’t have the luxury of a scheduled attack start time!