Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Plan for a smooth recovery

By Deborah Radcliff , Network World , 10/24/2005

Plan for a smooth recovery
Predefined response programs should be implemented before a security incident occurs, say IT executives who have dealt with public breaches and exposures of identity and financial data. Some regulations mandate a predefined response plan, such as Section 501B of the Gramm-Leach Bliley Act.

Basic elements of any response plan should include:

  1. Report the incident to regulators.
  2. Investigate the scope of the breach and determine affected parties.
  3. When criminal activity is suspected, do a forensics backup and report to law enforcement.
  4. Coordinate with legal, executive and public relations teams. Brief them in plain English, so they can understand clearly and act accordingly. This is particularly important when dealing with the media.
  5. Inform affected parties. Tell them what their risks are and how to protect themselves. Offer to monitor their credit when ID theft is suspected.
    • Directly contact those you can locate via e-mail and U.S. Postal Service.
    • Use the media to contact those you can’t reach directly.
    • Set up a 24/7 call center, anticipate questions and give operators scripts and escalation procedures, updating scripts as needed.
    • Establish a Web site with helpful information, keep it current and provide tools to empower victims, such as contact information for adding alerts to credit reports. Refresh and update site as new information comes in.
  6. Make necessary repairs to your systems; conduct system audits and use the experience to reinforce and train personnel handling sensitive data.
Back to Security breach
Click to see:
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.