From the Blogosphere
Data Breach Handling | @DevOpsSummit #DataCenter #DevOps #InfoSec
A data breach could happen to anyone. Data managed by your company is valuable to someone, no matter what the data is
By: Rishi Bhargava
Jul. 31, 2016 07:00 PM
A data breach could happen to anyone. Data managed by your company is valuable to someone, no matter what the data is. Everything has a price tag on the dark web. It is especially true when it is customer data, such as personal and payment card details.
When your customers' data turns up somewhere unexpected on the Internet, you may feel the world is collapsing around you. People start tweeting about the hack, angry customers phone in, and Brian Krebs publishes his first article. Your organization switches to an emergency mode to handle the situation. It is the time when your incident response team takes control to put the genie back in the bottle.
More Attention on Data Breaches
Furthermore, data breaches receive more media coverage, and customers become more concerned about the security of their personal data than ever. Target upset its shoppers with forcing them to replace their credit cards and to keep an eye on their credit reports. Customers of VTech were worried what happens with their kids' photos and personal details. TalkTalk subscribers wanted to abandon their contracts and called the CEO to step down.
Keeping the Customer Happy
If your organization can provide these answers and communicates things, chances your customers regain confidence in your brand is high. It never leaves a sour taste in your customers' mouth if the company demonstrates competence while handling the breach. Therefore, being prepared is good for the business.
Types of Data Breaches
The majority of the media-covered breaches can be narrowed down to two variants, however: malware and web attacks.
Hackers got into Ashley Madison, Sony Pictures, and OPM through well-crafted malware such as backdoor software. On the other hand, customer data from VTech and TalkTalk was accessed by the notorious web attack named SQL injection.
Responding to the Breach
For instance, your incident response team would probably respond to malware associated data breaches as the following:
The incident response team also queries internal tools (SIEM), external services (Threat Intelligence feeds), and engages internal staff such as IT to collect information for the investigation. Having the necessities in order, along with playbooks and automation could all make the overall response process smooth and consistent.
Legal and PR Matters
The answers typically serve as an input for your legal and PR teams:
Central Hub of Information
As the incident response team collects, processes, and shares a large amount of information, it is a wise decision to invest in an information sharing platform. It eases the information flow between all parties during the investigation process. Besides, the accumulated data could be invaluable for handling future breaches.
Your organization should respond to this challenge by preparing for the inevitable. The solution is well-prepared incident response team, which could manage the situation in a competent manner.
Playbooks should be prepared and practiced that covers the most frequent types of data breach scenarios. Good incident coordination depends on information gathering, processing, and sharing. Well-informed PR and legal teams could build an effective crisis communication strategy to regain customer trust.
Reader Feedback: Page 1 of 1
Cloud Computing Blogs