Overview Of Cyber Security Incident Response Plan Training PPT

Slide 2

This slide gives an overview of cyber security incident response plan. To plan your cyber incident response, you must consider ways to handle cyber security and your readiness to handle an incident, deal with a data breach or intrusion, etc. 

Slide 3

This slide highlights steps to create an effective cyber incident response plan. These steps are: Containing the breach, , forming an incident response team, recovering lost data from backup, conducting an investigation, addressing legal & regulatory requirements, reporting the incident, and managing reputational damage & customer relations.

Slide 4

This slide discusses how to contain a data breach, which is the first step in creating an effective cyber incident response plan. After you detect a breach, the priority is to contain it and mitigate the risk of further damage to your organization or loss of data.

Instructor’s Notes: Sometimes, you may need to suspend your entire organization's network or website. If the breach is limited to certain aspects of your business, then determine which services, processes, and operations can continue without any risk, while you deal with the incident.

Slide 5

This slide gives information about the formation of a cyber incident response team. The team should comprise the following: Technical personnel, HR representatives, PR experts, data protection experts, etc.

Slide 6

This slide discusses the importance of recovering lost data after a data breach. After you’ve isolated all compromised devices, you should restore all the files from the backups your organization keeps.

Slide 7

This slide discusses how to conduct an investigation, which is a crucial step to create an effective cyber incident response plan. Investigate to analyze which security controls failed and maintain a record of this information.

Slide 8

This slide talks about addressing legal and regulatory requirements when a cyber incident occurs. You may need to inform specific organizations or individuals about the cyber incident to manage the incident. Be clear about who you need to notify and why.

Slide 9

This slide discusses reporting an incident as a part of an effective cyber incident response plan. You should report cybercrime incidents to the law enforcement agency assigned to investigate these.

Slide 10

This slide talks about managing reputational damage and customer relations. If the harm to your reputation and business is severe, you might want to work with a crisis manager or a public relations professional to develop feasible solutions.