Incident Response Planning

 Information security breaches are increasing in volume and severity – it’s not a question of will your organization will be breached, but of when. It is critical to have a plan in place that addresses not only technology issues, but also business concerns. Too often the responsibility of responding to a data breach is left up to the IT department. This is a very dangerous practice since they are not the people with the qualifications to analyze business risk. It is critical that Incident Response plans be developed that represent both technology and business concerns to ensure the approach is designed to protect the most critical assets to the business.