{"id":5372,"date":"2016-06-21T10:00:45","date_gmt":"2016-06-21T14:00:45","guid":{"rendered":"https:\/\/www.cscdigitalbrand.services\/blog\/?p=5372"},"modified":"2019-12-18T10:57:54","modified_gmt":"2019-12-18T15:57:54","slug":"cyber-attacks-do-you-have-a-response-plan","status":"publish","type":"post","link":"https:\/\/www.cscdbs.com\/blog\/cyber-attacks-do-you-have-a-response-plan\/","title":{"rendered":"Cyber attacks: Do you have a response plan?"},"content":{"rendered":"

In the last two weeks of January 2016 alone, 52 mainstream cyberattacks were committed against governments, public, and private sector companies around the world1<\/sup>. That\u2019s more than three attacks a day. Experts are warning that it\u2019s no longer if\u2014but when<\/strong>\u2014your company will be targeted. And when it is, are you prepared? Do you have a response plan in place to recover from, or even thwart an attack? IT Pro<\/em> reports that 50% of businesses worldwide have no countermeasures against Distributed Denial of Service (DDoS) attacks\u2014and that\u2019s just the most popular attack your company is facing right now.<\/p>\n

Cyber threats are increasing and it\u2019s essential that businesses are prepared. Attack activity has increased 85% year over year, and it doesn\u2019t appear to be slowing down any time soon.<\/p>\n

Investing in a robust Domain Name System (DNS) and DDoS protection is highly recommended, but as a minimum, businesses should protect themselves by ensuring DDoS attacks are covered under an Incident Response Plan (IRP) as part of a larger Disaster Recovery Plan and Business Continuity Plan. And most importantly, the IRP should be rehearsed.<\/strong><\/p>\n

Create an incident response team<\/strong><\/em>
\nTo get started, you need an incident response team. It sounds easy to create a team\u2014but who should be on this team; who within your company needs to be contacted in the event of an attack; who makes the decisions on how to react; and what do they communicate to whom?<\/p>\n

DDoS attacks leveraged at name servers will likely take out email, and also Voice Over IP telephone systems. It will also take out virtual private networks. Team members should share their landlines and cell phone numbers as back up contact information and make sure it\u2019s available offline; it may be the only way to communicate. All team members should also be aware of a \u201cWar Room\u201d to call or as a place to meet if an event occurs. This is a critical part of mitigation. You also want to include key DNS partners on your team, like Corporation Service Company\u00ae<\/sup> (CSC\u00ae<\/sup>).<\/p>\n

Purpose of an IRP<\/strong><\/em>
\nAccording to CIO Insight<\/em>, the average cost of one hour of down time is $105,710 and the average network outage is 18 hours<\/strong>2<\/sup>. Ponemon Institute estimates that the average annual cost to companies from DDoS attacks is $126,153<\/strong>. Meet with the IRP team regularly to rehearse your response and discuss threats\u2014and if under attack, first verify that it\u2019s a true cyber attack. Beyond that, always keep your company management informed and discuss:<\/p>\n