{"id":9394,"date":"2022-03-02T15:45:55","date_gmt":"2022-03-02T14:45:55","guid":{"rendered":"http:\/\/nfirjun2026.local\/how-can-your-organization-prepare-for-a-cyber-incident\/"},"modified":"2024-02-12T14:12:41","modified_gmt":"2024-02-12T13:12:41","slug":"how-can-your-organization-prepare-for-a-cyber-incident","status":"publish","type":"post","link":"https:\/\/www.cyber-security-online.nl\/en\/how-can-your-organization-prepare-for-a-cyber-incident\/","title":{"rendered":"How can your organization prepare for a cyber incident?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"9394\" class=\"elementor elementor-9394 elementor-8505\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8e07ea1 e-flex e-con-boxed e-con e-parent\" data-id=\"8e07ea1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-ff0300e e-con-full e-flex e-con e-child\" data-id=\"ff0300e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-1d2e2ad e-con-full e-flex e-con e-child\" data-id=\"1d2e2ad\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-cc43d05 e-con-full e-flex e-con e-child\" data-id=\"cc43d05\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0ffddbb elementor-widget elementor-widget-text-editor\" data-id=\"0ffddbb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\n            <strong>Every day the media come up with news about <a href=\"https:\/\/www.cyber-security-online.nl\/en\/incident-response-specialist-24-7-availability\/\">cyber attacks, data leaks or ICT malfunctions caused by suspected cyber attacks<\/a>. <a href=\"https:\/\/www.cyber-security-online.nl\/en\/cyber-security-awareness-for-security-awareness-in-the-workplace\/\">It turns out that organizations are often poorly prepared for such a cyber incident.<\/a> This is unwise, because such incidents can cause enormous disruptions. Today, any organization can fall victim to a cyber attack due to exploited vulnerabilities in its own network or in those of software vendors. These are usually not specifically targeted at your organization, but in some cases the attacks do target a specific organization.<\/strong>\n          <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a3149cc e-con-full e-flex e-con e-child\" data-id=\"a3149cc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-57f0f5f elementor-widget elementor-widget-image\" data-id=\"57f0f5f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1024\" height=\"632\" src=\"https:\/\/www.cyber-security-online.nl\/wp-content\/uploads\/2019\/10\/nfir_cyber_security3.jpg\" class=\"attachment-2048x2048 size-2048x2048 wp-image-2612\" alt=\"Incident Response, ransomware cyber attack\" srcset=\"https:\/\/www.cyber-security-online.nl\/wp-content\/uploads\/2019\/10\/nfir_cyber_security3.jpg 1024w, https:\/\/www.cyber-security-online.nl\/wp-content\/uploads\/2019\/10\/nfir_cyber_security3-300x185.jpg 300w, https:\/\/www.cyber-security-online.nl\/wp-content\/uploads\/2019\/10\/nfir_cyber_security3-768x474.jpg 768w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-048c4be elementor-widget elementor-widget-text-editor\" data-id=\"048c4be\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Prevention is always better, of course, but practice has shown that the threat is so varied in nature that as an organization you would do well to be prepared across the board for all possible scenarios. As a director or CEO, how do you ensure that your organization is well prepared for a cybersecurity incident? By developing an Incident Response strategy and plan.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ffd1b90 e-flex e-con-boxed e-con e-parent\" data-id=\"ffd1b90\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-ad86705 e-con-full e-flex e-con e-child\" data-id=\"ad86705\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7ad8aa0 elementor-widget elementor-widget-heading\" data-id=\"7ad8aa0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What is Incident Response?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e77cd56 elementor-widget elementor-widget-text-editor\" data-id=\"e77cd56\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Incident Response is the process an organization uses to deal with an IT Security incident and its consequences. Four fundamental steps of Incident Response are:<\/p>\n<ul>\n<li>Step 1: Setting up technical preparation<\/li>\n<li>Step 2: Forming an Incident Response Team<\/li>\n<li>Step 3: Create Incident Response Plan<\/li>\n<li>Step 4: Training, practicing and learning<\/li>\n<\/ul>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-90a4e8f e-flex e-con-boxed e-con e-parent\" data-id=\"90a4e8f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-b5ef6aa e-con-full e-flex e-con e-child\" data-id=\"b5ef6aa\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7314e33 elementor-widget elementor-widget-heading\" data-id=\"7314e33\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Step 1: Setting up technical preparation<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-411e50c elementor-widget elementor-widget-text-editor\" data-id=\"411e50c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>In Incident Response, technical preparations are the starting point. For example, to build a <em>forensic trail<\/em> (digital trail) of an incident, it is necessary for all kinds of log files to go back as far as possible in time: at least three months, but preferably longer. These include the logs of firewalls, antivirus and malware packages, the Active Directory, Office365 and Windows events, among others. You can also activate and monitor detection technology already in your IT infrastructure.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0d36c41 e-flex e-con-boxed e-con e-parent\" data-id=\"0d36c41\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-990d814 e-con-full e-flex e-con e-child\" data-id=\"990d814\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3300fcc elementor-widget elementor-widget-heading\" data-id=\"3300fcc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Step 2: Forming an Incident Response Team<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3938555 elementor-widget elementor-widget-text-editor\" data-id=\"3938555\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>It is essential to bring together the staff who will take on the required tasks in an Incident Response team, which can also act as a task force for cyber incidents. This includes analyzing and monitoring threats, as well as coordinating during an IT Security incident. Make sure it is clear who the team members are, what responsibilities they have, and &#8211; perhaps most importantly &#8211; make sure they are properly trained and educated. Many organizations seek the assistance of a Computer Emergency Response Team from a specialized IT security company such as NFIR when IT security incidents occur.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-351d077 e-flex e-con-boxed e-con e-parent\" data-id=\"351d077\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-b1258bb e-con-full e-flex e-con e-child\" data-id=\"b1258bb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5b790f8 elementor-widget elementor-widget-heading\" data-id=\"5b790f8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Step 3: Create Incident Response Plan<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8f8cc81 elementor-widget elementor-widget-text-editor\" data-id=\"8f8cc81\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\tAn Incident Response plan (IR plan) allows for coordinated and effective response to an incident. It includes a set of instructions to help your staff detect, respond to and recover from security incidents. Examples of an IT security incident include an outage, a data breach or a digital attack. The goal is to respond quickly and appropriately to reduce impact, minimize damage and repair work.\n\nPart of the IR plan is a risk assessment that identifies specific risks to your organization. What systems do you have company information on? What resources are used for this purpose? What information needs to be protected? Where is the information located and what are the legal obligations in the event of a data breach? Next, you will create a clear roadmap outlining the steps that need to be taken and which individuals and parties need to be involved or informed in the event of an IT Security incident. NFIR can assist you with this. For example, we offer a training course in which our experts take you through the process and roadmap for an Incident Response plan. NFIR&#8217;s co-drafting of your IR plan is also possible.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-637164d e-flex e-con-boxed e-con e-parent\" data-id=\"637164d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-7cc67cd e-con-full e-flex e-con e-child\" data-id=\"7cc67cd\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-70c59d3 elementor-widget elementor-widget-heading\" data-id=\"70c59d3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Step 4: Training, practicing and learning\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a7a7bf7 elementor-widget elementor-widget-text-editor\" data-id=\"a7a7bf7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Make sure the plans are kept secure (preferably on paper), but are accessible to those who need to access them in the event of a cyber incident. Train Incident Response team members well in all aspects of their job. This can be done, for example, with NFIR&#8217;s Incident Readiness training . In addition, it is very important to practice incidents in a realistic way so that team members really start functioning as a team. These crisis simulations train the team to respond appropriately to incidents. This can be done at NFIR, for example, with an Incident Response Dry-run (simulation with &#8220;injects&#8221; of a successful ransomware attack).<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-53cc76d e-flex e-con-boxed e-con e-parent\" data-id=\"53cc76d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-b8b1924 e-con-full e-flex e-con e-child\" data-id=\"b8b1924\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-cd57bbf elementor-widget elementor-widget-heading\" data-id=\"cd57bbf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Communicating is important<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19c7d8e elementor-widget elementor-widget-text-editor\" data-id=\"19c7d8e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Effective communication is crucial in a cyber incident. This applies to internal and external communications.<\/p>\n<p><em><br \/>\n  <strong>Internal<\/strong><br \/>\n  <br \/>\n<\/em>When an employee suspects that an incident is occurring or there is a threat, that person must be able to raise the alarm quickly. Make sure your employees know how, and properly arrange for 24\/7 reporting. Also, make sure it is clear who is communicating with external parties (such as an ICT vendor, cloud provider, the Personal Data Authority or, if necessary, a Computer Emergency Response Team). Make sure employees are aware of the hotline, scenarios and any other contacts. If employees know the plan exists, what it entails and how to report incidents, action can be taken quickly. Regular updates to your employees about a cyber incident and progress are also important.<\/p>\n<p><em><br \/>\n  <strong>External<\/strong><br \/>\n  <br \/>\n<\/em>Finally, good external spokesmanship on a cyber incident is essential. Every organization has stakeholders such as suppliers, customers and partners who have the right to be properly and timely informed about the possible consequences of a data breach and business continuity for them. Where possible, your organization will provide actionable advice to those affected by the IT Security Incident.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c576113 elementor-widget elementor-widget-text-editor\" data-id=\"c576113\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\n            <a href=\"https:\/\/www.cyber-security-online.nl\/en\/incident-response-specialist-24-7-availability\/\"><strong>Read more about Incident Response services here<\/strong><strong> from NFIR.<\/strong><\/a>\n          <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c3e3bba e-con-full e-flex e-con e-parent\" data-id=\"c3e3bba\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-d143476 e-con-full e-flex e-con e-child\" data-id=\"d143476\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d5660d8 elementor-cta--skin-classic elementor-animated-content elementor-bg-transform elementor-bg-transform-zoom-in elementor-widget elementor-widget-call-to-action\" data-id=\"d5660d8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"call-to-action.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-cta\">\n\t\t\t\t\t<div class=\"elementor-cta__bg-wrapper\">\n\t\t\t\t<div class=\"elementor-cta__bg elementor-bg\" style=\"background-image: url(https:\/\/www.cyber-security-online.nl\/wp-content\/uploads\/2019\/08\/Incident-Response_LQ-1024x345.jpg);\" role=\"img\" aria-label=\"incident response, incident response plan, effective, incident response, team\"><\/div>\n\t\t\t\t<div class=\"elementor-cta__bg-overlay\"><\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-cta__content\">\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<h2 class=\"elementor-cta__title elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t\tSecurity incident? Meet Incident Response\t\t\t\t\t<\/h2>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-cta__description elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t\t<p>Our Incident Response team is available 24\/7 to identify and resolve any cyber incident.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-cta__button-wrapper elementor-cta__content-item elementor-content-item \">\n\t\t\t\t\t<a class=\"elementor-cta__button elementor-button elementor-size-md\" href=\"https:\/\/www.cyber-security-online.nl\/en\/contact\/?your-subject=Incident%20response\">\n\t\t\t\t\t\tGet in touch with us\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8a18f08 elementor-widget elementor-widget-accordion\" data-id=\"8a18f08\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"accordion.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-accordion\">\n\t\t\t\t\t\t\t<div class=\"elementor-accordion-item\">\n\t\t\t\t\t<h2 id=\"elementor-tab-title-1441\" class=\"elementor-tab-title\" data-tab=\"1\" role=\"button\" aria-controls=\"elementor-tab-content-1441\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon elementor-accordion-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-closed\"><i class=\"fas fa-plus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-opened\"><i class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-accordion-title\" tabindex=\"0\">What is Emotet malware? And what does it do?<\/a>\n\t\t\t\t\t<\/h2>\n\t\t\t\t\t<div id=\"elementor-tab-content-1441\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"1\" role=\"region\" aria-labelledby=\"elementor-tab-title-1441\"><p>Emotet is so-called &#8220;polymorphic malware&#8221; &#8211; which constantly adapts itself to avoid detection. The malware is often used by cybercriminals as a springboard to gain access to corporate environments. Once inside, attackers often look for ways to gain further access to the network.<\/p>\n<p>Read the full article:  <a href=\"https:\/\/www.cyber-security-online.nl\/en\/what-is-emotet-malware-and-what-does-it-do\/\">What is Emotet malware? and what does it do?<\/a><\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-accordion-item\">\n\t\t\t\t\t<h2 id=\"elementor-tab-title-1442\" class=\"elementor-tab-title\" data-tab=\"2\" role=\"button\" aria-controls=\"elementor-tab-content-1442\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon elementor-accordion-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-closed\"><i class=\"fas fa-plus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-opened\"><i class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-accordion-title\" tabindex=\"0\">When am I dealing with a reportable incident data breach?<\/a>\n\t\t\t\t\t<\/h2>\n\t\t\t\t\t<div id=\"elementor-tab-content-1442\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"2\" role=\"region\" aria-labelledby=\"elementor-tab-title-1442\"><p>At the moment that unauthorized persons (can) access personal data, there is a potential data breach. In many cases, organizations are required to report the incident to the Personal Data Authority (AP). The AP was established and designated as the regulator of the General Data Protection Regulation (AVG) and the AVG Implementation Act (UAVG). When a data breach occurs depends on the circumstances. For example, a data breach need not be reported if the risk to rights and freedoms of data subjects is limited. This is in contrast to when an unauthorized person gains access to a customer&#8217;s passport or bank account number. After all, in that case, misuse of identity or financial consequences cannot be ruled out. Such incidents must be reported to the AP within 72 hours.<\/p>\n<p>Read more: <a href=\"https:\/\/www.cyber-security-online.nl\/en\/when-am-i-dealing-with-a-reportable-incident-data-breach\/\">When am I dealing with a reportable incident\/data breach?<\/a><\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-accordion-item\">\n\t\t\t\t\t<h2 id=\"elementor-tab-title-1443\" class=\"elementor-tab-title\" data-tab=\"3\" role=\"button\" aria-controls=\"elementor-tab-content-1443\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon elementor-accordion-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-closed\"><i class=\"fas fa-plus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-opened\"><i class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-accordion-title\" tabindex=\"0\">Can I always contact NFIR to get help in case of an IT-Security incident?<\/a>\n\t\t\t\t\t<\/h2>\n\t\t\t\t\t<div id=\"elementor-tab-content-1443\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"3\" role=\"region\" aria-labelledby=\"elementor-tab-title-1443\"><p>Yes, we are available 24\/7 for SMEs, multinationals, government bodies, educational institutions and non-profit organisations. Within three hours, an incident response (CERT) team is present at every location in the Netherlands (Wadden Islands excluded).<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-accordion-item\">\n\t\t\t\t\t<h2 id=\"elementor-tab-title-1444\" class=\"elementor-tab-title\" data-tab=\"4\" role=\"button\" aria-controls=\"elementor-tab-content-1444\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon elementor-accordion-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-closed\"><i class=\"fas fa-plus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-opened\"><i class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-accordion-title\" tabindex=\"0\">NFIR is an official CERT but what does that actually mean?<\/a>\n\t\t\t\t\t<\/h2>\n\t\t\t\t\t<div id=\"elementor-tab-content-1444\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"4\" role=\"region\" aria-labelledby=\"elementor-tab-title-1444\"><p>CERT stands for Computer Emergency Response Team. The attribute is awarded by Carnagie Mellon University to companies and teams involved in digital security incidents. In the Netherlands, there are a number of official CERTs of large organisations involved in combating cyber incidents, such as the NCSC, the IBD, the Ministry of Defence, telecom organisations and banks.<\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-accordion-item\">\n\t\t\t\t\t<h2 id=\"elementor-tab-title-1445\" class=\"elementor-tab-title\" data-tab=\"5\" role=\"button\" aria-controls=\"elementor-tab-content-1445\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon elementor-accordion-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-closed\"><i class=\"fas fa-plus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-accordion-icon-opened\"><i class=\"fas fa-minus\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-accordion-title\" tabindex=\"0\">Incident Response Plan<\/a>\n\t\t\t\t\t<\/h2>\n\t\t\t\t\t<div id=\"elementor-tab-content-1445\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"5\" role=\"region\" aria-labelledby=\"elementor-tab-title-1445\"><p>Know what to expect in the case of a<a href=\"https:\/\/www.cyber-security-online.nl\/en\/incident-response-plan\/\">  IT security incident. Read more about the Incident Response plan.  <\/a><\/p>\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<script type=\"application\/ld+json\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"What is Emotet malware? And what does it do?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"<p>Emotet is so-called &#8220;polymorphic malware&#8221; &#8211; which constantly adapts itself to avoid detection. The malware is often used by cybercriminals as a springboard to gain access to corporate environments. Once inside, attackers often look for ways to gain further access to the network.<\\\/p>\\n<p>Read the full article:  <a href=\\\"https:\\\/\\\/www.cyber-security-online.nl\\\/en\\\/what-is-emotet-malware-and-what-does-it-do\\\/\\\">What is Emotet malware? and what does it do?<\\\/a><\\\/p>\\n\"}},{\"@type\":\"Question\",\"name\":\"When am I dealing with a reportable incident data breach?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"<p>At the moment that unauthorized persons (can) access personal data, there is a potential data breach. In many cases, organizations are required to report the incident to the Personal Data Authority (AP). The AP was established and designated as the regulator of the General Data Protection Regulation (AVG) and the AVG Implementation Act (UAVG). When a data breach occurs depends on the circumstances. For example, a data breach need not be reported if the risk to rights and freedoms of data subjects is limited. This is in contrast to when an unauthorized person gains access to a customer&#8217;s passport or bank account number. After all, in that case, misuse of identity or financial consequences cannot be ruled out. Such incidents must be reported to the AP within 72 hours.<\\\/p>\\n<p>Read more: <a href=\\\"https:\\\/\\\/www.cyber-security-online.nl\\\/en\\\/when-am-i-dealing-with-a-reportable-incident-data-breach\\\/\\\">When am I dealing with a reportable incident\\\/data breach?<\\\/a><\\\/p>\\n\"}},{\"@type\":\"Question\",\"name\":\"Can I always contact NFIR to get help in case of an IT-Security incident?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"<p>Yes, we are available 24\\\/7 for SMEs, multinationals, government bodies, educational institutions and non-profit organisations. Within three hours, an incident response (CERT) team is present at every location in the Netherlands (Wadden Islands excluded).<\\\/p>\\n\"}},{\"@type\":\"Question\",\"name\":\"NFIR is an official CERT but what does that actually mean?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"<p>CERT stands for Computer Emergency Response Team. The attribute is awarded by Carnagie Mellon University to companies and teams involved in digital security incidents. In the Netherlands, there are a number of official CERTs of large organisations involved in combating cyber incidents, such as the NCSC, the IBD, the Ministry of Defence, telecom organisations and banks.<\\\/p>\\n\"}},{\"@type\":\"Question\",\"name\":\"Incident Response Plan\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"<p>Know what to expect in the case of a<a href=\\\"https:\\\/\\\/www.cyber-security-online.nl\\\/en\\\/incident-response-plan\\\/\\\">  IT security incident. Read more about the Incident Response plan.  <\\\/a><\\\/p>\\n\"}}]}<\/script>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65e0071 elementor-widget elementor-widget-spacer\" data-id=\"65e0071\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Every day the media come up with news about cyber attacks, data leaks or ICT malfunctions caused by suspected cyber attacks. It turns out that [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":2612,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"none","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"both","_seopress_redirections_param":"","_seopress_redirections_type":301,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"default","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[43,27],"tags":[],"class_list":["post-9394","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-incident-response-en","category-security-awareness-en"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/posts\/9394","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/comments?post=9394"}],"version-history":[{"count":0,"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/posts\/9394\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/media\/2612"}],"wp:attachment":[{"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/media?parent=9394"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/categories?post=9394"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cyber-security-online.nl\/en\/wp-json\/wp\/v2\/tags?post=9394"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}