Emergency Readiness Team

CISO ON DEMAND

Breach response and recovery


Containing an incident and avoiding a crisis calls for highly experienced Cybersecurity crisis teams. An in house CISO/SOC team can quickly become overwhelmed with pressure to address stakeholder concerns. At WDigital, we have (sadly too often) seen CISO’s burning out with loss of immediate productivity and long term passion for the role post a Cybersecurity Crisis. Our independent teams are not clouded by factors often associated with an in house role and can respond rapidly with highly versed damage limitation and recovery procedures.

Speed and accuracy

Speed is essential to limiting damage after an incident. For example, for insurance purposes immediate response can result in more accurate loss measurement and claim quantification, and faster settlement of a claim.

Medium-long term risks:

Customers usually express concern regarding loss of personal data and privacy and may develop long-term brand aversion. Business partners are concerned about near-term cross-contamination of their systems and the longer-term integrity of data and transactions. Employees may be overwhelmed by negative publicity and increased stress. Regulators want assurance regarding consumer protection, and the state of the business and industry. Investors are attuned to short-term financial impacts and longer-term business and brand viability.

Crisis communication

Depending on the severity of a crisis, you’ll need to issue an official announcement/statement about the incident to internal/external stakeholders, potentially including media, clients and partners. WDigital’s crisis communication templates are ready for scenarios ranging from minor to catastrophic breach incidents. These templates will help save time and avoid incoherent communication.

Response

On a tactical level, WDigital can help identify and analyse affected systems in preparation for isolation. We will help analyze evidence to determine cause, severity, and impact of the incident. We will then move to strengthen network security, improve protocols, and increase vigilance as indicated by the analysis. Enhance monitoring and other measures to mitigate future risk of similar incidents and enhance policies that may increase security.

Investigation

At WDigital, we think of a digital crime scene as a physical crime scene: trampling evidence or cleaning things up can make forensic tasks difficult to impossible. So, our team, guided by over 20+ years of experience start by securing the digital crime scene and preserving evidence. What’s more, we are entrusted by Government bodies to Audit, Review & Test Cyber Risks and our personnel are certified to the highest Global Cybersecurity standards.

Post Incident

It’s essential to anticipate requests from regulators and law enforcement, which may include systems access and a review of response activity (not limited to) 1. Analyzing the impacts and loss exposures for insurance and other reporting purposes 2. Understanding additional risks brough about by ad-hoc processes, technology, and work-arounds required during incident response. We will assist to document and report.

REQUEST EMERGENCY ASSISTANCE

We’ll set up an URGENT conference call with your team