Home About Sensilla Services Contact Over sixty percent of organizations don’t have a clear and consistent business wide security incident response (IR) plan. IR is a process that describes how your organization will handle data breach or cyber attack, including how the organization will attempt to manage and mitigate consequences of the breach or attack. The goal is to manage the incident so that the damage is limited and recover time, costs and reputation is kept minimal. SANS Institute provides six steps for effective incident response: Preparation – Preparation is the most important phase of incident response is preparing for an inevitable security breach. Preparation assists organizations in determining how well their IR Team will be able to respond to an incident and should involve policy, response plan and strategy, communication, documentation, defining the IR Team members, access control, tools and training. Identification – Identification is the process through which incidents are detected, ideally promptly to enable rapid response to reduce costs and damage. To be effective, the IR Team gathers events from log files, monitoring tools, intrusion detection systems and firewalls to detect and decide incidents and their scope. Containment – Containment is a priority once an incident is detected or identified. The goal is to contain the damage and prevent further damage from occurring. The sooner an incident is contained the less damage to re-mediate. Eradication – Eradication is the phase of effective incident response that requires removing the threat and restoring affected systems to earlier status, while minimizing data lost. Recovery – During recovery; testing, monitoring and validating systems while putting them back into production to verify that they are not re-infected or compromised. Rebuild – During the rebuild stage, systems considered to be irreparable are rebuilt and backed up data restored. Further monitoring systems to verify eradication processes have been effective. Organizations that don't have an Incident Response Plan in place. (C) 2021 Blue Spruce Technologies We'll assume you're ok with this, but you can opt-out if you wish.AcceptReject Read More

Home About Sensilla Services Contact Blue Spruce Technologies offers a variety of remote managed networking services. We can provide you with reliable experienced engineers who are able to perform daily tasks you require. Switch, Router and Firewall configurations Security appliance maintenance Emergency technical support Implement network and security devices Configuration management for wireless and wired infrastructure (C) 2021 Blue Spruce Technologies We'll assume you're ok with this, but you can opt-out if you wish.AcceptReject Read More