Cyber Incidents – ECSC Top Tips #4 – Disconnecting Yourself!

Welcome to #4 in a series of helpful tips, should you ever find yourself victim of a cyber incident response. Based on over 20 years of cyber incident response work, for clients of all sizes and sectors, ECSC is your ideal partner when you need it most.

?

Disconnecting Yourself!

You are in the middle of a suspected breach. Your retained experts (you should have this in place) advise you to shut off your Internet connection(s) immediately.

Do you have the guts to ask for forgiveness rather than permission? You could be the hero, or perhaps the one out of a job? So, you play it safe by escalating up to the appropriate levels of management. Depending upon the day, time and?availability of key management, this may take hours or even days...

Hackers are quicker than this, and ransomware is everywhere...

Additionally, having received the relevant permission, are the administrators required available? During one of our incident responses, the clients' firewalls were outsourced to a global provider, who 'helpfully' said they could respond?'within?the 3-day firewall change SLA'. This needed a 3-minute response. Luckily, already being on-site, we could step in.

So, the key here is to have pre-authorised permission for the people in your organisation with the right knowledge and understanding to instigate an Internet disconnect. Along with having people available who have the access and skills to make it happen.

If you think you'd benefit from having ECSC experts by your side when you need them most, then the easiest solution is a low-cost Incident Response Retainer, giving you access to 24/7/365 remote and on-site guidance, advice and support.

To learn more, please read our brochure here or call the team on 01274 736 223.

All the best with your future cyber projects.

ECSC Group plc

T: 01274 736 223

E:[email protected]

www.ecsc.co.uk