The security team finds a big danger that a very important computer might get hacked. Besides trying to stop the hack from happening, what are three other different plans a company can make to handle this big danger?
When a significant danger of a crucial computer being hacked is identified, a company can implement three primary plans beyond immediate defensive measures. These are incident response, business continuity, and disaster recovery. Incident response involves having a pre-defined set of actions to take if a security breach, like a hack, actually occurs. This plan outlines who is responsible for what, how to contain the breach, eradicate the threat, and recover systems and data. For example, an inci....
Community Answers
Sign in to open profiles and full community answers.
Rohan Adhikari
“When a significant danger of a crucial computer being hacked is identified, a company can implement three primary plans beyond immediate defensive measures. These are incident response, business continuity, and disaster recovery. Incident response involves having a pre-defined set of actions to take if a security breach, like a hack, actually occurs. This plan outlines who is responsible for what, how to contains the breach, eradicate the threat, and recover systems and data. For example, an incident response plan might detail steps to isolate the compromised computer from the network to prevent the hack from spreading. Business continuity planning focuses on maintaining essential business functions even when critical IT systems are unavailable due to an attack. This plan ensures that the company can continue to operate, perhaps at a reduced capacity, by having primary order management system is down because of a cyberattack. Disaster recovery is a subset of business continuity and specifically addresses the restoration of IT infrastructure and data after a disruptive event, such as a successful hack that renders systems unusable or corrupts data. This pla details procedures for restoring from backups, rebuilding servers, and ensuring data integrity. A disaster recovery measure might involve restoring the hacked computer's operating system and data from a recent, clean backup. These three plans work in conjunction to minimize the impact of a successful cyberattack and ensure the organizations resilience.”
100.0%
Ricardo Fabian Sanchez
“besides trying to stop the hack, a company can prepare three key plans, an incident response plan to detect, contain, and recover from the attack; a business continuity/disaster recovery plan to keep critical operations running and restore systems after major disruption; and a crisis communication plan to manage internal and external messaging, protect reputation, and meet legal and regulatory obligations during and after the incidents”
57.99999999999999%
Gayatri Sudhakar Hire
“Besides trying to stop the hack, a company can prepare incident response, buisness continuity, and disaster revovery plan together, these ensure the organization can contain the breach , keep operating during disruption, and restore systems afterward - building resilience against even most serious cyber threats.”
41.0%
Laurence Serrone
“Create an incident responce plan to ensure you know what to do in the event of a breach. Have a business continuity plan that allows the business to keep running even if this computer is hacked. Lastly have a disaster recovery plan where you can restore the the hacked computer data after it is wiped.”
40.0%
Pavan Kumar Tule
“besides trying to stop the hack the three other plans a company can make are in incident response to fight and fix the live breach business continuity to keep essential business operations running while systems are down and DR to rebuild infrastructure and restore data from backups”
34.0%
Ferid Mehtiyev
“After they contain the device and stop its access to internal network, the company must search network history to identify if the attacker has hacked into other devices, increasing his attack surface. Then they should find out how the attack occured and what are the vulnerabiilities leading to this attack. After everything they must make a risk analysis to further understand the risks”
33.0%
Shan Devinda
“Insted of trying to prevent the hack, a company can focus on risk acceptance by acknowledging the vulnerability exists but intentionally deciding to leave the system online while strictly monitoring it, usually beacause the cost or operational disruption of fixing it outweighs the immidiate threat.”
32.0%
Sukumar Mylapur
“1. Incident response & Containment plan 2. Business continuity & Recovery Plan 3. Communication & Legal/Compliance Plan”
15.0%
Xitiz Basnet
“incident response plan, business continuity plann, disaster recovery plan”
9.0%
Kabo Sekoto
“Disaster recovery plan Business continuity plan Incident response plan”
9.0%
Arunank
“The four risk treatment options are : 1. Mitigate the risk 2. Accept the risk 3. Transfer the risk 4. Avoid the risk”
4.0%
Sudarshan Lamichhane
“Risk Acceptance Risk Transfer Risk Avoidance”
0.0%
David Neves De Oliveira
“prevençao detecçao reposta e recuperaço”
0.0%