|
Organizations should have an Information
Security Program in place to continually protect against incursion
from without and within.
Computers and digital controls are at the heart
of today’s organizations. As such, the interruption of business
systems can disrupt and even cripple normal business activities.
In addition, when systems are breeched, they expose business operations
and information to the world, the organization to claims liability,
and a degradation of the organizations public image. Incidents can
come from thieves, competitors, disgruntled employees, and hackers
from around the world.
| Back
to Top ^ |
Types of incidents your organization might
face include:
 |
Incursion
into systems by an unauthorized outside party |
 |
Incursion
by system users in an unauthorized area |
 |
Unauthorized
use of system resources or space |
 |
Disruption
or denial of service attacks from hackers |
 |
Unauthorized
use of or downloading from the Internet |
 |
Introduction
of viruses, Trojan horses, etc. |
 |
Unauthorized
addition of programs |
 |
Copying
or removing information or programs from the system |
| Back
to Top ^ |
Each incident response engagement is tailored to
the specific type and scope of the incident. Some of the most basic
elements of an incident response plan include:
 |
Initial
investigation and analysis of the event |
 |
Gathering
of evidence to support litigation if desired |
 |
Identification
and closure of the system flaw(s) that allowed the incident
to occur |
| Back
to Top ^ |
Ideally, organizations should have an Information
Security Program in place to continually protect against incursion
from without and within. For information on developing an Information
Security Program, or if you suspect that your organization has been
the victim of a security breach, immediately contact Kathy
Brown who will put you in touch with one of our incident
response consultants.
You can contact Kathy Brown, Marketing Manager at +1 602 354 2772
or by email at kbrown@forensicsconsulting.com.
|