Cyber Crisis Management - Kloudlearn

Online course offering
Cyber Crisis
Management
“In a crisis, don’t hide behind anything
or anybody. They’re going to find you
anyway.”
- Bear Bryant
© KloudLearn www.kloudlearn.com

Learning
Objectives
© KloudLearn www.kloudlearn.com 2
What is Crisis
Common features of Crisis
How do you prepare for a cyber attack
Crisis Management Lifecycle
Preparing for a cyber security crisis
Do’s and Don’t

What is Crisis?
We should start by defining what a cyber security crisis is. Typically, it might be confused with an
incident response plan and although they are definitely different, the way we manage the incident
response process might end up in a serious crisis.
In the case of a crisis, we are facing a situation that
might seriously impact the organization, its
reputation, financial stability and even its viability as
a business.
An incident response plan refers to a
methodology to cope with day-to-day cyber
security events, like virus infections, malwares,
DDoS and phishing attacks etc…

● The situation materializes unexpectedly.
● Decisions are required urgently.
● Time is short.
● Urgent demands for information are received.
● There is sense of loss of control.
● Pressures build over time.
● Specific threats are identified
Common Features of Crisis

How do You Prepare for a Cyber Attack?
● Readiness: Readiness equates not only to vigilance, for example in the form of 24/7 Monitoring, but also
to readiness of resources.
● Response: Management’s response can either contain or escalate an incident; indeed, a poor response
can even create a crisis.
● Recovery: Steps to return to normal operations and limit damage to the organization and its
stakeholders continue after the incident or crisis.
● Risk = Threat x Vulnerability x Consequence

Crisis Management Lifecycle

● Involve Your Executive Leadership Team
Preparing for a Cyber Security Crisis
■ This includes the C-suite, i.e CEO, COO, CFO,
CIO, CCO
■ This includes business unit leaders, i.e EVPs,
SVPs
■ This includes representatives or delegates from
legal, HR, Corporate Communications and
Marketing
■ These leaders and representatives must be
familiar with their role and responsibilities
during a crisis

● Create a cyber security crisis management plan
■ Structure of the crisis management team
■ Responsibility matrix with names of the specific
individuals
■ Threat matrix with severity levels and associated
response protocols
■ Communication templates for customers, business
partners, media and external agencies

● Conduct breach simulations
■ Breach simulation is a tabletop exercise
in your boardroom
■ All the key executives need to
participate
■ A hypothetical breach scenario is
created and the participants are asked
to respond
■ Guidance is provided by the moderators
■ The executive team becomes familiar
with the process and the sources of
information

● Engage a third party
■ Breach can stay undetected for years but once they are
detected there is extreme urgency to investigate
■ Finding the right forensics partner can be a challenge
■ Companies have no choice but to rush into a contract
often overlooking critical provisions
■ Social engineering uses which aspects of human nature
includes, Trust manipulation, Desire to be helpful, Lack of
understanding
■ Legal and compliance teams need to be involved in the
review of all contractual language.

Do’s of Crisis Management
● Call the board and management teams together immediately to plan a response.
● Take advantage of the board’s diversity and hear all perspectives on the situation.
● Be aware that reputation is a driver of market value.
● Make a statement when experiencing more than one crisis at a time or in close succession.
● Monitor your company’s financial ratings after a crisis.
Don’ts of Crisis Management
● Don’t ignore the situation. If the choice is to remain silent, continue to monitor it.
● Don’t overlook the speed of social media and how it can be a negative or a positive force.
● Don’t make excuses for poor choices in behavior.
● Don’t underestimate how interconnected systems are.
Do’s and Don’ts

● Data breaches are inevitable. therefore, an organization MUST be prepared to handle one.
● The information security team MUST take the lead in building and socializing a crisis management program.
● The information security team MUST build partnerships with legal, compliance, corporate communication
and privacy terms of the company.
● A detailed crisis management plan MUST be created and maintained.
● Periodic simulations MUST be conducted.
● The executives of the company MUST be educated and must fully understand their roles and
responsibilities.
Key Takeaways

Test your knowledge!
Quiz
Quiz

Proactive phase
Strategic phase
Recovery phase
Reactive phase
In four phases of the
Conflict Management
Life Cycle. In which
phase would an
organization’s crisis
management plan be
implemented?
14

The impact of a given risk
The likelihood of a risk
“Loss of data
availability” helps
determine which of the
following:
15

Business, cost,
technology, and process
should be the main
focus while planning
Software risk impact
assessment.
16
True
False

Everyone in the organization.
the CIO or CISO executive.
A specialized cyber security defense team.
Cyber security
protection of an
organization is the
responsibility of:
17

Risk = Likelihood x
Weakness. True or
False?
18
True
False

Trust manipulation
Desire to be helpful
Lack of understanding
All of the above
Social engineering uses
which aspects of human
nature?
19

Identification of risk
domains and risk
exposure are done in
the Analysis of Security
Risk.
20
True
False

Detective
Corrective
Preventative
Deterrent
Redundant computer
servers would be an
example of which type
of security measure?
21

Cross-site scripting
Buffer overflow.
SQL injection.
System shutdown.
To avoid ________ , user
input should not be put
directly into a database.
22

The likelihood of a threat happening
The vulnerability of the organization to the threat
The cost to mitigate or recover from the
threat
The duration of the threat event
Which of the following
is not considered a
factor in determining
cyber risk?
23

Thank You
KloudLearn, Inc. is headquartered in Silicon Valley, California. Our mission is to help
enterprises provide an engaging and impactful learning experience that improves
business performance. We provide the industry’s most modern LMS (Learning
Management System). For more information visit us at www.kloudlearn.com or reach
out to us at info@kloudlearn.com

Cyber Crisis Management - Kloudlearn

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Cyber Crisis Management - Kloudlearn

Similar to Cyber Crisis Management - Kloudlearn (20)

More from KloudLearn

More from KloudLearn (7)

Recently uploaded

Recently uploaded (20)

Cyber Crisis Management - Kloudlearn