The right response: how organisations should react to security incidents. Issue 12 (December 2017)

• Record Type: Journal Article
• Authors: Mansfield-Devine, Steve
• Is Part Of: Network security. Volume 2017:Issue 12(2017:Dec.)
• Page Start: 16
• Page End: 19
• Publication Date: 2017-12
• Subjects: Computer security -- Periodicals; Computer networks -- Security measures -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; Computers -- Access control -- Periodicals; 005.805
• DOI: 10.1016/S1353-4858(17)30124-1
• Languages: English
• ISSNs: 1353-4858

Abstract

Abstract : The maxim that 'it's not a case of if your organisation gets breached but when' is getting a little tired. And its overuse could be a problem. As Stuart Reed, a senior director at NTT Security, explains in this interview, it leads to a fatalistic and partial outlook on information security at a time when organisations need a far more rounded view – albeit one in which incident response assumes an ever-greater significance. The maxim that 'it's not a case of if your organisation gets breached but when' is getting a little tired. And its overuse could be a problem. As Stuart Reed of NTT Security explains in this interview, this attitude leads to a fatalistic and partial outlook on information security at a time when organisations need a far more rounded view – albeit one in which incident response assumes an ever-greater significance. And he explains how to create a robust incident response plan that starts with understanding the risks you face.