A plan against a data breach, which is equally flexible, should include these key points:
CEOs and their executive colleagues, should be able to identify the most critical business functions, and then prioritize which systems are recovered and restored first.
The impact breach are different for each system, which is why thresholds are set for each problem, some data breaches can only cause minimal interruptions, while others can spoil the entire system. A plan against these breachs must be related to the corresponding security levels.
Planear la intervención
The IT team determines which systems are affected by a breach, the impact, the scope and which is the most crucial to receive immediate attention for data protection and for how long.
Plans against data breaches must be modular and granular at the same time. The experts said, with this we can guarantee control over the privacy of our company's data.
You should have a list of people in charge of each specific function, along with your personal information and the name of a forensic signature (preferably a checkpoint, to guarantee a timely response and possibly one or two backup signatures).
Detail when and how to integrate the executive crisis management team into the loop, so that the appropriate legal and regulatory requirements in relation to data breaches are met, and the company's public relations people can adequately assist in informing for the clients and consumers.
Alternative systems are very useful, with these systems you can easily go back to manual processes so as not to lose the important information or alter IT times. The IT team will be responsible for finding out these alternatives.
The execution of simulations based on specific problems of information gaps, are highly functional since they prevent the IT team from possible attacks and in this way it can be determined if there is any external help to execute the plan against the information gaps. We recommended to run simulations periodically.
These simple steps will help us to contain the information gaps more effectively in our IT systems, we recommend you follow them and consult a specialist to obtain more detailing information.