The First 48 Hours: Incident Response Strategies Following a Cyber Incident

This webcast analyzes the first 48 hours following a cybersecurity incident, and lays out incident response strategies that facilitate critical decision making and enable victim companies to rapidly recover. Having evolved significantly over the past several years, cyber incident response has moved beyond just quantifying the data exposure and hunting for end-point threats. New techniques such as user behaviour analytics and cloud identity management are two examples of game changers in modern incident response. Traditional hard drive forensics were historically the primary source of evidence during a cyber investigation and are now just one component of the effort where broader crisis management, threat pursuit, and information assurances take on prominent roles in the response. Join Ankura’s senior cybersecurity experts as they share their respective decades of experience in leading organizations through some of the most complex incident response engagements. Learn valuable insights into new approaches in IR that are imperative in today’s initial response in the First 48 hours of a significant cybersecurity incident. What you’ll learn: --What are the primary risks and efforts that the most elite incident responders are concerned about in the First 48 hours of a significant security incident? --What are the key questions inside and outside counsel are asking cybersecurity experts in the First 48 hours of a significant security incident? --What are some of the new and emergent approaches to cyber IR to better providing better assurances to the victim organization? --Where are some organizations missing opportunities for greater assurances during the response in the First 48?