Cyber Attack Incident Management

When the inevitable cyber incident or attack occurs, your incident response plan and capabilities should kick in.

A well planned and executed response will help to minimise the damage caused by a cyber attack. This could mean anything from cutting the amount of data lost, to minimising public and media fall out.

Incident response is a critical part of the cyber security life cycle, but in order to respond appropriately, the other elements of the cycle must be considered. As identified by the National Institute of Standards & Technology (NIST), the life cycle is: Identify, Protect, Detect, Respond, Recover. Our NIS Directive guidance follows a broadly similar process.

Your incident response plan should also be linked to disaster recovery, business continuity and crisis management plans, and supported with the relevant capabilities. These come into play when an incident is serious enough to cause major disruption and/or damage to your business.