Incident Response Integral to Preserving Revenue

Data loss, HR issues, physical threats, whistle-blowing reports. On the surface, these and similar incidents range from an inconvenience to a major business disruption. But did you know that if properly recorded and contained, they can actually add value in the long run?

Incidents, like other forms of valuable data, can be measured. They can help risk practitioners spot trends and patterns to recognize where the organization is most vulnerable. This was the main theme of an incident response webinar presented by security expert Justin Fimlaid on June 24.

While comprehensive incident management programs factor in different data points depending on the type of business and the industry, all have one thing in common — anywhere there’s a valuable asset, incidents should be tracked.That said, incident response programs are often viewed as low-priority by executives, as they do not directly generate revenue. However, businesses should keep in mind that one incident can erode — or in some cases destroy — years of hard work.

An incident response program can both minimize the damage of an incident and give insight that will help prevent more like it from happening in the future. Here is the typical incident management process:

  1. Create incident plans.
  2. Detect and contain incidents as soon as they occur.
  3. Analyze incident data and communicate internally.
  4. Resolve the incident and put processes in place to prevent future occurrences.

Technology can bolster the incident management process. An incident management solution, such as Lockpath’s Keylight platform, allows for both identification and investigation of types of incidents, while preserving evidence and linking incidents to applicable policies, risks and business continuity plans. From an IT perspective, vulnerability, SIEM and web app data can be fed into the incident management application and put into workflow for remediation. Other departments, like HR, finance and security, can track any issues they have within the software as well. Within a mature incident response program, departments can pool their efforts to ensure that a range of issues from trivial to consequential don’t escalate more than they must.

Related Articles

Shutdown makes business riskier

Shutdown makes business riskier

Learn how the government shutdown affected business and the countermeasures needed to address the risk to remedy the situation.