To Improve Cyber Defenses, Practice for Disaster
November 3, 2023 – Published on Dark Reading
If you’re not already using crisis simulations as a key part of incident preparation and response, it’s time to start stress-testing personnel and protocols to help teams develop skills and readiness for difficult situations.
“We’re seeing more and more demand, as well as requirements established by boards, cyber insurance carriers, or other key stakeholders, to perform these simulations annually or more,” says Mark Lance, vice president of digital forensics and incident response (DFIR) and threat intelligence at GuidePoint Security.
Not only do these exercises help employees understand their roles and responsibilities during an incident, but they’re also a great way to educate people. As an example, most people don’t understand the intricacies involved during a ransomware incident, the multitude of third parties involved, and key decision points unless they’ve already been through that situation.
“A crisis simulation not only familiarizes them with their own incident response processes, but it also builds awareness of relevant threats, the associated risks, and critical decisions,” Lance says.
Read More HERE.