{"id":1548,"date":"2016-06-09T16:26:43","date_gmt":"2016-06-09T16:26:43","guid":{"rendered":"https:\/\/www.activo.ca\/blog\/?p=1548"},"modified":"2016-06-09T16:26:43","modified_gmt":"2016-06-09T16:26:43","slug":"5-steps-to-create-an-effective-incident-response-program","status":"publish","type":"post","link":"https:\/\/www.activo.ca\/blog\/5-steps-to-create-an-effective-incident-response-program\/","title":{"rendered":"5 Steps to Create an Effective Incident Response Program"},"content":{"rendered":"

Organizations rely on their data to carry out daily operations. Unfortunately, high-profile breaches are becoming more common and<\/em> costly. In 2015 alone, cyber-attacks saw almost 300 million records leaked and $1 billion stolen<\/strong>. Moving into 2016, it\u2019s important to make sure your online operations and electronic data are secure and protected.<\/a>\"Cisco
\n<\/strong><\/p>\n

But where should you start? <\/strong>In a recent blog, Cisco<\/a> laid out five steps for an effective response program. We\u2019ve summarised them here for you:<\/p>\n

1.\u00a0\u00a0\u00a0\u00a0 Set Up an Incident Response Program<\/h2>\n

You can establish an incident response program for your organization by:<\/p>\n

1. Identifying a response leader<\/strong>. This person should have a good understanding of the business and be an effective problem solver.<\/p>\n

2. Assemble a team of stakeholders<\/strong>. Each should have clearly outlined responsibilities and roles.<\/p>\n

3. Draft your response process, establishing documentation standards<\/strong>. Remember, you don\u2019t need to make the plan complicated. It just needs to work for your business and be consistent.<\/p>\n

4. Connect people with the tools they need<\/strong>. The good thing is that much of what you need is already likely in place.<\/p>\n

5. Understand capability gaps and craft a plan to address them<\/strong>. You can start with a minimum viable process and enhance it over time.<\/p>\n

2.\u00a0\u00a0\u00a0\u00a0 Detect Events<\/h2>\n

To discover incidents quickly, rely on sources like<\/strong>:<\/p>\n