Crisis Management
A good crisis management practice with business continuity plans and disaster recovery plans is essential to minimize the impact of larger IT breakdowns or cyber-attacks.
Good risk management practices are essential to prepare for potential events that might have a significant impact on business objectives. Improsec offers advisory and a structured approach to ensure informed risk decisions. Our focus is not on reaching a zero risk, but instead on creating risk transparency and a visible balance of cost and resources needed to mitigate cyber risk. Improsec offers advisory in building disaster recovery and business continuity plans, crisis management and we also can facilitate training and test of your preparedness on handling a cyber-attack. This can include i.e. test of the crisis escalation process, mobilization of crisis teams, and internal and external crisis communication.
Product
Building, testing and maintaining plans consist of the following:
Identifying the most critical IT assets in order to understand the resilience of these assets
Identifying the need for business continuity plans, disaster recovery plans
Build appropriate plans including a crisis management model ensuring roles & responsibilities and decision making
Instructions for technical staff on how to restore critical IT assets in a prioritized order
Communicating the plans to both internal and external communication Testing of the plans includes:
Pre-warning exercise which measures the time to assemble the crisis management team or critical staff
Structured table-top exercise with crisis management
Scenario based walkthrough and test
Acting crisis manager during a crisis
Value
A good crisis management practice with business continuity plans and disaster recovery plans is essential to minimize the impact of a larger IT breakdowns or cyber attacks. It means that your employees and management can work in the most optimal way during such an event.
Method
Our method is based on best practice frameworks which we adapt to fit scenarios. The plans are built based on meetings, workshops and interviews involving representatives of management and technical staff. In addition, relevant tests are conducted on selected scenarios.
Involvement
Through a close dialogue we will, together, agree on scope and content.