Incident Response as a Lawyers' Service
Channel: FIRST
Date: 2021-06-17

Speaker: Dr. Daniel Woods (University of Innsbruck, AT)

Thousands of incidents each year are now managed by external law firms. Victim firms can call a hotline and delegate incident response to external counsel without a pre-existing relationship. We draw on expert interviews and industry reports to describe how this model breaks from conventional incident response, how this type of IR is recommended by cyber insurance and discuss the implications for IR.  Preliminary evidence suggest this form of IR is less responsive and less efficient, cyber insurers control who gets work, and that litigation risk is prioritized over technical risk.

About the Speaker
Daniel researches the economics of security and privacy with recent research on risk quantification, cyber insurance and online consent.  He is currently a post doctoral fellow at the University of Innsbruck, Austria.  He received his PhD "The Economics of Cyber Risk Transfer" from the University of Oxford's Computer Science Department.