If you are in charge of security, you are likely responsible for implementing, testing and reviewing your financial institution's breach response plan. The following recommendations can help ensure the important steps are followed to keep plan activities and responsibilities updated.

Conduct fire drills with mock attacks at least once per month to give employees the chance to practice responding to a breach attempt.
Keep track of system activity on a daily basis to monitor security alerts. Evaluate how team members would have responded to the breach if it had been successful.
Compile historical data on successful attacks, including how the vulnerability was exploited, and the response team's performance.
Host a breach response team meeting at least once a month in order to:
- Discuss holes in the plan that team members have identified through their drills;
- Review the response checklist for missing or unneeded steps;
- Ensure that your breach notification plan is current;
- Discuss budget needs; and
- Review new threats that have been identified globally.
Help employees who require additional training, especially member service representatives and receptionists tasked with responding to external inquiries.
Since it's a regulated industry, monitor changes in regulations or ask compliance officers to keep you advised of any changes.
If you have data or applications in the cloud, discuss your cloud vendor's method for responding to data breaches. Ask your vendor for a copy of their response checklist, including contact information for at least two of their employees responsible for responding to breaches, and gather any other information that might be useful.

In today's world, every financial services organization must recognize the likelihood of a cyberattack. It is inevitable that a hacker will try to access your system for financial gain eventually. By having an effective plan and remaining vigilant, you will have a better chance of stopping the hacker's efforts. However, it is critical to also plan how to respond should the attack be successful if you want to minimize the damage to your organization's finances and reputation.

Instant Insights /

Attacks Are Inevitable; Breach Response Plans Invaluable

Related Stories

Recommended For You