Key Ways to Minimize Business Disruption
Prepare an Incident ReportYou need to capture all available information about the attack as quickly as possible. This report, which might be needed for investigative and insurance purposes and obligations to third parties, should describe what happened and when, and actions that were taken.
Identify the Affected Business ProcessesFailure to quickly identify the scope of an incident can lead to higher response costs. You also need to determine whether data is still accessible and how it might be used for malicious purposes.
Establish an Incident Response TeamMake sure your organization has a cyber "A-Team" on call. It should be prepared to handle the immediate response to a breach, along with coordinating communications, assisting external investigations and reviewing insurance coverages.