{"id":644,"date":"2021-03-07T12:10:01","date_gmt":"2021-03-07T12:10:01","guid":{"rendered":"http:\/\/www.cyberlaws.org\/?p=644"},"modified":"2021-03-07T12:11:32","modified_gmt":"2021-03-07T12:11:32","slug":"how-to-handle-cyber-security-incidents-in-start-ups","status":"publish","type":"post","link":"https:\/\/www.cyberlaws.org\/how-to-handle-cyber-security-incidents-in-start-ups\/","title":{"rendered":"How to Handle Cyber-Security Incidents in Start-Ups"},"content":{"rendered":"<h2 style=\"text-align: left;\"><strong>HOW to HANDLE CYBER-SECURITY INCIDENTS in Start-Ups<\/strong><\/h2>\n<p style=\"text-align: justify;\">In the current age where information technology has penetrated in almost every area of our lives, both personal and professional has huge impact of Information technology, in other words our live has been completely dependent on technology. Be it organizational or personal, the amount of data collected and processed by big-companies and start -ups is alarming. Human beings have become so much dependent on technology, be it hardware or software, holdable to wearables to insertable, technology is all but inseparable.<\/p>\n<p style=\"text-align: justify;\">Be it office or daily household tasks, technology has invaded in every sector and make the work easier and more efficient to perform., however, all the technology gadgets and services have one thing in common, that is data processing. In order to process the data like PII(Personally Identifiable Information),PHI Protected health information about individuals, and critical financial, scientific, confidential\u00a0 data of organizations and countries is\u00a0 extremely lucrative\u00a0 to competitors and cybercriminals, ranging\u00a0 hackers to , script kiddies, the wannabes, elites, activists, crackers, and phreakers to punks ciphers<\/p>\n<p style=\"text-align: justify;\">For an example you are start-up organization providing information technology services to any government or any other big organization which is processing critical data, then a vulnerability in your system can be a potential risk which could lead to data breach of your client. As per recent trends, at least one new zero-day vulnerability was found each week. As zero-day vulnerabilities are discovered, they just serve as a tool for cybercriminals\/hackers to intensify attacks. Hence by enabling proactive measures such as incident management or cyber crisis management plan can be an effective way to limit or even prevent the propagation of a cyber security attack.<\/p>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\"><strong>IMPACTS OF CYBER SECURITY BREACHES IN START-UPS<\/strong><\/p>\n<p style=\"text-align: justify;\">Cybersecurity breaches impacts\u00a0\u00a0 organizations and companies in different ways. Many of which cause serious damage to the organizations and start-ups, if not permanent. Some effects of cyber breaches are:<\/p>\n<ul style=\"text-align: justify;\">\n<li><strong><em>Organizations leads to financial losses:<\/em><\/strong> An intense cyber security breach can damage critical servers and hardware which could lead to financial loss. In addition to it an organisation which is not capable to secure its information assets and prone to frequent cyber security attacks is liable for penalties imposed by client or government.<\/li>\n<li><strong><em>Organizations do experience loss of confidential data.<\/em><\/strong> This is often the major consequence of a cybersecurity attack. Confidential Data, which could range from credit card numbers, Aadhar number, PAN number, phone numbers, social security numbers, health records, right up to software design, code, military confidential or classified information, medical formulas could be stolen.<\/li>\n<li><strong><em>Loss in Reputation and value degradation in the business market have often been cited as a significant concern. <\/em><\/strong>Trust and value built from customers (service providers) to companies(clients) after a mishandled cybersecurity attack starts discrediting and is brought into question, especially when the company fails to respond promptly to a cybersecurity attack.<\/li>\n<li><strong><em>Competitiveness between firms and organizations becomes compromised<\/em><\/strong>. This can cause disaster, from which small to medium organizations or start-ups might never recover.<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\u00a0Cyber security breaches or incidents can sustain by opting different kind of strategies. Few of them is setting up preventive measures to avoid a potential attack, and the other being how to respond when a breach or attack occurs as a corrective measure in case of any Zero-day attack. However, both the methodologies require intense monitoring of the information systems.<\/p>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\"><strong>STEPS TO AVOID A POTENTIAL CYBERSECURITY ATTACK<\/strong><\/p>\n<p style=\"text-align: justify;\">Cyber security attacks are of various kinds and natures, and there is an enormous number of resources out there stating how to prepare for the inevitability of a cyber-attack. Cyber risk can come from various points like open ports, unattended laptops, desktops, improper patch management etc and this activity requires involvement of top to lowest level of employees the organisation. There is no perfect methodology or solution available to handle cyber security incidents or attacks in any organisation, however the impact can be minimised if handled properly. Below are the points to strengthen cyber security:<\/p>\n<ul style=\"text-align: justify;\">\n<li><strong><em>Perform Cyber Security Risk Assessment:<\/em><\/strong> Perform an intensive risk assessment for your business and identify all the possible weak points which could lead to cyber security attack and find out a risk mitigation plan for each risk, don\u2019t leave any risk unattended<\/li>\n<li><strong><em>Employees Training<\/em><\/strong>. In any organisation aware employees can be helpful to handle cyber security incidents. Any organisation or start-up should provide adequate training those handling sensitive data.<\/li>\n<li><strong><em>Regularly backup sensitive data.<\/em><\/strong> Data is the core of every company. Unavailability of data can destabilize, disrupt, and even lead to shut down of start-ups, or organizations. Having data backup at an alternate location online\/offline is the key of surviving a cybersecurity breach or incident. Remember, data availability is one of the key components of cybersecurity.<\/li>\n<li><strong><em>Employee Screening prior to employment.<\/em><\/strong> A proper policy and SOP for employee screening shall be developed and followed with due diligence. Since employees are often the weakest link in a cyber-security plan, all the future employees should be screened to validate their cyber-security skill sets desired for their respective positions in the organisation or start-ups.<\/li>\n<li><strong><em>Keep systems updated by regular patch updates.<\/em><\/strong> Most of the start -ups and small companies don\u2019t have proper patch management programs for systems and software which could lead to a serious cyber threat because these vulnerabilities can be exploited by cybercriminals to access your systems. Applying timely security patches to software and hardware systems routinely can reduce cyber security threats, as most of the threats exploit known vulnerabilities(weaknesses).<\/li>\n<li><strong><em>Adapt Security culture and take cyber threat seriously<\/em><\/strong>. As part of the organisation&#8217;s culture, cyber-security must be priority by the management. Negligence can lead to unrecoverable cyber-attacks. Management should provide adequate budget for enhancement of cyber-security in the organisation.<\/li>\n<li><strong><em>Develop Cyber Crisis Management Plan<\/em><\/strong>. Since Cyber incidents comes unannounced organizations and start-ups should identify and classify different cyber -security attack scenarios and generate mitigation plan for it. Table top exercises are helpful to understand the readiness. A contingency plan shall be developed<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\">A well skilled team for handling cyber security in any organisation is very important. Having the Data Privacy Officer (DPO), Chief Information Security Officer (CISO), and the Chief Information Officer (CIO), etc., with well-defined role are helpful for any organisation<\/p>\n<p style=\"text-align: justify;\"><strong>HOW TO RESPOND TO SECURITY BREACHES?<\/strong><\/p>\n<p style=\"text-align: justify;\">\n<ol style=\"text-align: justify;\">\n<li><strong><em> Establish an Incident Response Team (IRT).<\/em><\/strong><\/li>\n<\/ol>\n<p style=\"text-align: justify;\">Create an IRT with skillsets and capable to handle Cyber security incidents. Define roles and responsibilities of each member which may in some cases, take precedence over normal duties. The IRT can be comprised of a variety of departments including Information Technology, Finance Compliance and Human Resources.<\/p>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\">Your (IRT)Incident Response Team should include your Chief Information Security Officer (CISO), who will lead the team organisation\u2019s security policy direction. In case of start-up Virtual CISO can be a guide.<\/p>\n<ol style=\"text-align: justify;\" start=\"2\">\n<li><strong><em> Identify the type and extent of incident.<\/em><\/strong><\/li>\n<\/ol>\n<p style=\"text-align: justify;\">A impact matrix for incident should be clearly defined for damage assessment and determine the appropriate response. For example, an incident where a computer virus is easily detected and removed and which has not impacted any external or internal parties can be categorised as low and should not be escalated.<\/p>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\">However, an incident which impacts clients and customers should be escalated to the IRT.<\/p>\n<ol style=\"text-align: justify;\" start=\"3\">\n<li><strong><em> Escalate incidents as necessary.<\/em><\/strong><\/li>\n<\/ol>\n<p style=\"text-align: justify;\">Employees are the first one to observe the cyber security incidents, any kind of incidents including abnormal system behaviour, phishing mails, fraud mails etc shall be immediately escalated to IRT so that timely corrective action can be taken.to mitigate suspicious vulnerabilities and avoid unexpected downtime.<\/p>\n<ol style=\"text-align: justify;\" start=\"4\">\n<li><strong><em> Notify affected parties, government bodies and outside organizations.<\/em><\/strong><\/li>\n<\/ol>\n<p style=\"text-align: justify;\">Identify and assign responsibility to one member of the IRT managing communication to affected parties (e.g.\u00a0 government bodies, investors, third party vendors, etc.). Depending on the severity of the incident, the IRT member should inform the affected parties and law enforcement agencies<\/p>\n<ol style=\"text-align: justify;\" start=\"5\">\n<li><strong><em> Gather and analyse evidence.<\/em><\/strong><\/li>\n<\/ol>\n<p style=\"text-align: justify;\">IRT is responsible for identifying, gathering and analysing both physical and electronic evidence as part of the investigation. These evidences shall be kept securely as a part of artefacts. Lesson learnt should be documented for future.<\/p>\n<ol style=\"text-align: justify;\" start=\"6\">\n<li><strong><em> Mitigate risk and exposure.<\/em><\/strong><\/li>\n<\/ol>\n<p style=\"text-align: justify;\">Technical members of the IRT shall be responsible for monitoring the situation and ensuring any effects or damage created as a result of the incident are appropriately repaired and measures are taken to minimize future occurrences.<\/p>\n<p style=\"text-align: justify;\">Since cyber security is the responsibility of everybody in the organisation the necessary disciplinary action shall be defined for the guilty. An adequate amount of penalty or action shall act as a deterrence and helpful in reducing the cyber-security incidents.<\/p>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\"><strong>Keywords: <em>Cyber-Security, Information Security, Cyber-Security incidents, CISO, Virtual-CISO, hacking, cybercriminal, start-ups,incident-response <\/em><\/strong><\/p>\n<p style=\"text-align: justify;\">\n<p style=\"text-align: justify;\">\n","protected":false},"excerpt":{"rendered":"<p>HOW to HANDLE CYBER-SECURITY INCIDENTS in Start-Ups In the current age where information technology has penetrated in almost every area of our lives, both personal and professional&#8230; <\/p>\n","protected":false},"author":1,"featured_media":645,"comment_status":"closed","ping_status":"closed","sticky":true,"template":"","format":"1234","meta":[],"categories":[151,4,124],"tags":[74,8,152,153,18,154,14,150,141],"_links":{"self":[{"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/posts\/644"}],"collection":[{"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/comments?post=644"}],"version-history":[{"count":2,"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/posts\/644\/revisions"}],"predecessor-version":[{"id":647,"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/posts\/644\/revisions\/647"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/media\/645"}],"wp:attachment":[{"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/media?parent=644"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/categories?post=644"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cyberlaws.org\/wp-json\/wp\/v2\/tags?post=644"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}