Organisations may have response plans in place but often many cannot be operationalised. In many cases the documentation outlining procedure post-breach is outdated or too general, offering non-specific guidance on critical activities. Furthermore, key factors such as lack of integration across different business units, the development of siloed strategies and lack of coordination during large response efforts contribute towards an ineffective and ultimately costly response.

A response should therefore be guided by a plan that aims to not only to limit damage while reducing recovery time and costs but also manages the expectations and increase the confidence of external stakeholders.

Attending this workshop will enable you to:

• Create an effective incident response plan that is immediately operational
• Learn the latest techniques used in incident response
• Establish how to assign responsibility for the plan and ensure integration of the incident-response efforts across business units and geographies
• Ensure that response plan documentation is regularly updated widely available
• Ensure that the plan is communicated to all employees and that they are aware of their roles and responsibilities
• Establish how hackers use pre-attack research, reconnaissance and target selection to infiltrate businesses and how you can use that knowledge to strengthen your defences
• Understand infiltration and post-infiltration entrenchment
• Benchmark cyber attack scenarios and develop easily accessible quick-response guides for defined scenarios
• Maintain relationships with law enforcement
• Maintain relationships with external breach-remediation providers and experts
• Establish how to deal with media interviews and queries as well as other media & PR skills that will help not hinder
• Understand the business impacts of cyber breaches facilitated through a discussion of recent cyber attacks
• Regularly practice, probe and stress test the to increase awareness of ‘blind spots’ and hone response capabilities