Cyber Breach Response That Actually Works: Organizational Approach to Managing Residual Risk - Paperback

by Andrew Gorecki (Author)

You will be breached--the only question is whether you'll be ready

A cyber breach could cost your organization millions of dollars--in 2019, the average cost of a cyber breach for companies was $3.9M, a figure that is increasing 20-30% annually. But effective planning can lessen the impact and duration of an inevitable cyberattack. Cyber Breach Response That Actually Works provides a business-focused methodology that will allow you to address the aftermath of a cyber breach and reduce its impact to your enterprise.

This book goes beyond step-by-step instructions for technical staff, focusing on big-picture planning and strategy that makes the most business impact. Inside, you'll learn what drives cyber incident response and how to build effective incident response capabilities. Expert author Andrew Gorecki delivers a vendor-agnostic approach based on his experience with Fortune 500 organizations.

• Understand the evolving threat landscape and learn how to address tactical and strategic challenges to build a comprehensive and cohesive cyber breach response program
• Discover how incident response fits within your overall information security program, including a look at risk management
• Build a capable incident response team and create an actionable incident response plan to prepare for cyberattacks and minimize their impact to your organization
• Effectively investigate small and large-scale incidents and recover faster by leveraging proven industry practices
• Navigate legal issues impacting incident response, including laws and regulations, criminal cases and civil litigation, and types of evidence and their admissibility in court

In addition to its valuable breadth of discussion on incident response from a business strategy perspective, Cyber Breach Response That Actually Works offers information on key technology considerations to aid you in building an effective capability and accelerating investigations to ensure your organization can continue business operations during significant cyber events.

Back Jacket

AN ESSENTIAL GUIDE FOR ORGANIZATIONAL LEADERS ON BUILDING AN EFFECTIVE CYBER BREACH RESPONSE PROGRAM AND MANAGING RESIDUAL RISK

Destructive ransomware attacks, disastrous data breaches, and a host of other cyber events are now headline news, negatively impacting numerous companies and millions of individuals around the world. Now more than ever, it is crucial that organizations prepare for cyberattacks and increase their cyber resilience as they expand their digital footprint and online presence. Cyber risk is no longer a hypothetical factor in the decision making process--senior managers, Chief Security Officers, and other key leaders need to understand the organizational aspects of cyber incident response to prepare for significant cyber events, deal with the repercussions of a security breach, and minimize the impact of a cybersecurity attack.

Cyber Breach Response That Actually Works is an authoritative source of information on building and managing a cyber breach response program. Rather than focusing on overly technical, step-by-step investigation and remediation techniques, this accessible resource discusses the bigger picture of where incident response fits within an overall security program, and provides the tools necessary for designing and implementing a program from a governance perspective. Clear and concise chapters, assuming only a basic knowledge of cybersecurity and risk management concepts, provide a framework-agnostic approach for managing residual risk through cyber incident response, creating an effective and holistic strategy, and building capabilities that meet organizational needs.

Written by a security professional with years of practical incident response experience with Fortune 500 companies, this real-world guide covers incident response strategy, governance, incident management, breach investigations, laws and regulations, and more. You will be breached; it is inevitable. Cyber Breach Response That Actually Works will help you be ready when it happens.

Cyber Breach Response That Actually Works explains how to:

• Identify drivers for cyber breach response and create a sound strategy
• Build an effective Cyber Security Incident Response Team (CSIRT)
• Increase cyber resilience through planning and preparedness
• Minimize the impact of cyberattacks
• Decrease the cost of cyberattack response
• Build a technology toolkit to accelerate response activities
• Effectively investigate breaches and hunt for threats

Author Biography

Andrew Gorecki is a cybersecurity professional with experience across various IT and cybersecurity disciplines, including engineering, operations, and incident response. Originally from Europe, he provided consulting services across various industry sectors in the U.S., the UK, and other European countries. At the time of writing, he manages a team of incident response consultants within the X-Force IRIS competency of IBM Security where he leads investigations into large-scale breaches for Fortune 500 organizations, delivers proactive incident response services, and provides executive-level consulting on building and optimizing incident response programs.