This means having a written incident response plan, a pre-arranged incident response retainer, and a disaster recovery plan that gets critical systems back online.
My pickPalo Alto Networks Unit 42Palo Alto Networks Unit 42 offers incident response retainers that include proactive services.
IR retainers differ in their guaranteed response times and in whether unused hours can go toward tabletop exercises. DR tools differ in their recovery point and recovery time objectives. Check whether your insurer requires you to use a specific IR panel.
Why it works
The cost of an incident grows with every hour of confusion. Companies with a tested plan and a firm on call contain incidents faster and recover sooner.
What to look for
The retainer should guarantee a response time.
Run a tabletop exercise at least once a year.
Document recovery time objectives for your critical systems.