On the Alert: Crafting an Effective Incident Response Plan (IRP)

Every organization, large or small, needs an incident response plan to manage a breach and its consequences quickly. This incident response plan webinar explains how to build a dynamic, agile IR program for today's volatile threat landscape.

Restoring and backing up systems is no longer enough; breaches must be eradicated before they spread. You'll review the current data privacy and security landscape, how data breach response works and the critical components of a cyber incident response plan.

The session covers building an internal incident response team, communications before and during an incident, analyzing your solution providers' plans, how an IRP differs from a disaster recovery plan, and integrating incident response into security and development operations.

• Identify threats that require an incident response plan
• Compare the most effective response methods
• Develop an effective incident response plan
• Manage detection and remediation of lost data
• Recognize critical actions companies often miss after a breach
• Identify internal and external communication needs
• Isolate operational challenges and plan counter-actions

• The current data privacy and security landscape
• Understanding data breach response
• Critical components of cyber incident response plans
• Building an effective internal incident response team
• Communications before and during an incident
• Analyzing your solution providers' plans
• How a cyber incident response plan differs from a disaster recovery plan
• Challenges of incident response in a volatile threat landscape
• Key elements of breach prevention and response
• Integrating incident response into security and development operations
• Required people, processes and technologies

How your business responds to a security incident affects its ability to recover and prevent the next one. A well-designed, pressure-tested plan can protect against significant financial, reputational and regulatory harm, and it gives information security managers the information and organization they need.

The session suits security, IT, risk, operations, payments, finance and audit professionals, incident response and disaster recovery teams, and executives including CEOs, CFOs, CIOs and CSOs.

• Payments professionals
• Accountant
• Operations personnel
• Vendor Managers
• Disaster Recovery professionals
• Call center personnel
• Incident response team members
• Information security analyst
• Chief Security Officer
• Risk Manager
• Chief Information Officer
• Chief Operations Officer
• Information Security Manager
• Chief Executive Officer
• Chief Financial Officer
• Technology Manager
• Auditor

Dr. Robert E. Davis obtained a Bachelor of Business Administration in Accounting and Business Law, a Master of Business Administration in Management Information Systems, and a Doctor of Business Administration in Information Systems Management from Temple, West Chester, and Walden University; respectively. Moreover, during his twenty years of involvement in education, Dr. Davis acquired Postgraduate and Professional Technical licenses in Computer Science and Computer Systems Technology. Dr. Davis also obtained the Certified Information Systems Auditor (CISA) certificate — after passing the 1988 Information Systems Audit and Control Association’s rigorous three hundred and fifty multiple-choice questions examination; and was conferred the Certified Internal Controls Auditor (CICA) certificate by the Institute for Internal Controls.

Since starting his career as an information systems (IS) auditor, Robert has provided data security consulting and IS auditing services to corporations as well as other organizations; in staff through management positions. Before engaging in the practice of IS auditing and information security consulting; Robert (as a corporate employee) provided inventory as well as general accounting services to Philip Morris, USA, and general accounting services to Philadelphia National Bank (Wells Fargo). Furthermore, he has prior experience as a freelance writer of IT audit and information security training material.

Dr. Davis received recognition as an accomplished, energetic auditor, author, and speaker with a sound mix of experience and skills in monitoring and evaluating controls. Based on his accomplishments, Temple University's Fox School of Business and Management Alumni Newsletter, as well as The Institute for Internal Controls e-newsletter featured Dr. Davis. Furthermore, he is an Advisory Board Member of The Institute for Internal Controls, the first and inaugural Temple University CISA in Residence and a founding Temple University Master of Science in IT Auditing and Cyber-Security Advisory Councilmen. Last, he accepted invitations to join Delta Mu Delta International Honor Society, the Golden Key International Honour Society, the Thomson Reuters' Expert Witness List, the IT Governance LTD expert panel, as well as the International Association of IT Governance Standards honorary membership group.