Executing response and recovery plans
Security managers need to consider various aspects regarding the execution of the plan. To smoothly execute the plan, it is very important to have defined roles and responsibilities for each individual. Regarding the overall management of the plan, there should be a facilitator or director who should be in charge of executing the plan. This role should be assigned to a senior executive who has sufficient authority to make decisions during a crisis.
The security manager should consider the following aspects when executing a plan:
- They must ensure that control procedures are implemented in such a way that risks are appropriately addressed. For example, just installing anti-malware is not sufficient. The virus signature file should be updated regularly (ideally, it should be automated to update daily). Any time gap between this updating can be subject to exposure.
- In the case of a malware-infected server, it is advisable to rebuild...
