23965 shaares
177 results
tagged
incidentresponse
Good example of a totally crappy incident notification. Students could rip it apart in class! Via Twitter: "- Instant attribution to North Korea - Reference to 9/11 terrorist attacks - Needless use of “sophisticated” - Claiming detection wasn’t possible - Reference other victims to note defense is hard"
Emails threaten explosions unless people pay $20,000 in Bitcoin.
Few breaches could touch the Sony incident in terms of sheer excitement and salacious detail.
The security posture of the Office of Personnel Management has improved drastically and by the end of the year, the agency is on track to meeting almost all recommendations the US Government Accountability Office (GAO) made over the past two years. Full compliance is expected by the end of 2019.
Really nice as a toe-dip into how chaotic this can be, even though it's not cybersec-centric.
If Facebook and Google's recent security debacles proved anything, it's that disclosure is tricky business.
It happened again. Well actually, it happens all the time but I got inadvertently drawn into it again. I’m referring to this: Totally secure! Not just “pretty” secure or “really” secure but totally secure! I need to learn how to do that. Now this
Public shaming gets lots of places to clean up their crap when they ignore their internal security people.
Step-by-step for responding to common security incidents. Aimed at non-techies.
REALLY GOOD for walking through how attacks proceed.
What does a good information security incident response plan look like?
Simultaneously with their growing online presence, companies and individuals become increasingly susceptible to cyber-security attacks. Most organizations
Decent example of a procedure list.
Introduction Incident response is often an impromptu security area — organizations don't think about it until an incident occurs. Your response to an
With the General Data Protection Regulation (GDPR) going into effect this May, many organizations need to have a robust incident response program to ensure the safety of their customers’ and employees’ data. Here's part one of our guidelines.
For incident response teams, resuming normal operations in the wake of a cyberattack is the name of the game. However, lack of preparation and poor communication can impede recovery efforts.