Incident Response Communications
The primary objective of a communication plan is to educate employees on their roles and responsibilities with respect to the communication process. It includes processes such as who should authorize the communication, who should communicate, how to communicate, whom to communicate with, and what to communicate. A structured communication process during an incident improves the effectiveness of the incident response.
It is essential to define the various communication channels for the passing of information during an incident. Further, communication should be done only by authorized officials. This is to ensure that the chances of misunderstanding and disinformation are minimized to the greatest extent possible.
The list of official communication channels and authorized officials must be documented and communicated with each member. An information security manager should consider the availability of alternate communication channels in case...
