Demo
Your Incident Response Check List - Talion

Questions to ask your IR team

When a security breach happens, you need a clearly defined incident response plan to effectively identify, investigate, and respond to the incident.

Like a fire-drill, a predetermined plan can help cut through the chaos if the worst happens.

Start by asking your team the below questions, this will help them develop and implement an incident response process that is relevant to your business.

  • What types of events are considered incidents?
  • Who identifies an incident?
  • How is an incident identified?
  • What is the acceptable interruption window?
  • Who is the incident manager during an incident?
  • Who are the organization’s incident response team members?
  • How will these team members collaborate during the incident?
  • Who is the IR escalation contacts?
  • What is the internal communication plan?
  • What are the extended communication plans with providers?
  • What is the alternative communication plan if the attack disables regular means of communication (email, phone, conference bridge availability)?
  • What types of information does the company have and what are the disclosure requirements for each type?
  • When is the legal team involved and who makes that decision?
  • Is there a mechanism for the internal IR team, partners, vendors, and legal to collaborate effectively and manage the different work streams in the event of an incident?

We offer expert strategic and technical incident response services as well as a collaboration platform that allows for the most effective management of a security incident across multiple stakeholders both internally and externally. For more details speak to one of our experts.

 
Leave a comment
Filed in Blog, by Talion. 1 comments
Recent Comments
l2q
02 | 07 | 2121

Great post. I was checking constantly this blog and I am impressed!
Extremely helpful info particularly the last part 🙂 I care for such information much.
I was seeking this certain information for a very long
time. Thank you and good luck.

Watch demo video
We’re a tight-knit, highly skilled operation, so when a threat arises, we move quickly.
Talion
Watch demo video
We’re a tight-knit, highly skilled operation, so when a threat arises, we move quickly.
Talion
24x7x365 UK-based Security Operations Centre
Talion
Service underpinned by market leading threat intelligence team
Talion
Continually developed threat relevant content, backed by SLAs
Talion
MDR service has featured in the Gartner Magic Quadrant for 6 consecutive years
Talion
Experts in SIEM and SOAR technology
Talion
UK-based Senior Leadership
I'm ready
Request a more in-depth demo.
Discuss your cyber security needs
Fill in the form below and one of our team will be in touch to arrange your demo.

Call us on 0800 048 5775

Call us directly and we’ll put you in touch with the most relevant cyber expert.

Send us a message

Give us a brief description of what you’re looking for and we’ll put you in touch with the best person.