The importance of practice for cyber security incident response

When a cyber security incident is detected, recovery can be a stressful, messy, expensive and time-consuming process. For those who have never been involved in an incident response before, one of the biggest surprises is often how many different stakeholders need to be involved and coordinated, and how many considerations need to be accounted for in the decision-making process. This makes teamwork a critical part of ensuring that recovery from an incident is both effective and complete.