threat hunting best practices

Incident Response Q&A Part II: Why Incident Response Playbooks Aren’t the Answer, and Advice for New CISOs

Incident response will continue to be an important cyber security priority for many organizations in 2018. We took a moment to get some deeper insight into the incident response landscape from Delta Risk Senior Consultant Ryan Clancy. Here’s part II of our incident response discussion (you can find part I here). Dev: There have been some… Read More

incident response q&a

Incident Response Q&A Part I: Preparing Your Staff for a Cyber Security Incident (Including How to Respond to the Media)

Incident response will continue to be an important cyber security priority for many organizations in 2018. We took a moment to get some deeper insight into the incident response landscape from Delta Risk Senior Consultant Ryan Clancy. Here’s part I of our incident response discussion. Dev: It seems like the tide is shifting and we’re… Read More

incident response assumptions

Avoid These Common Incident Response Assumptions and Planning Mistakes

Last week, I took part in one of SecureWorld Seattle’s panels, “Manage the Damage – The Current Threat Landscape.” This panel focused on the topic of developing, fine-tuning, and practicing incident response plans to be better prepared for a breach. The moderator, Jean Pawluk, and the crowd in attendance, asked some thought-provoking questions about common incident response challenges that businesses face…. Read More

actionable incident response plan

6 Essential Steps for Creating an Actionable Incident Response Plan

A few weeks ago, I spoke at the ASIS 63rd Annual International Conference about creating an actionable cyber security incident response plan that is tested and proven. Considering ASIS is more focused on physical security, I kept my recommendations focused on incident response in general. As I looked at “cyberizing” the recommendations, I discovered there isn’t much I would adjust for a physical… Read More

incident response best practices

Incident Response Best Practices: What You Can Expect During the First Call

Imagine this scenario: you’ve just discovered your network has been breached. You need to get a handle on the situation quickly but you’re still trying to figure out what happened. What are the incident response best practices you should follow? As cyber security consultants, we know the first few moments of an incident can be highly… Read More

cyber security incident response

4 Ways to Integrate Your Cyber Security Incident Response and Business Continuity Plans

In most organizations, cyber security incident response (IR) and business continuity (BC) or  disaster recovery (DR) are still considered as separate functions and distinct disciplines. This is clearly a missed opportunity to maximize resources since they are two sides of the same coin. These disciplines share the common goals of protecting the organization’s reputation and ensuring continuity of operations. Therefore, it… Read More