Lesson 3: Implement an incident response plan

- [Instructor] We don't know the details…of Equifax's incident response plan,…but there is still a third lesson…that we can draw from their experience.…When cybersecurity incidents strike,…mature organizations have an incident response plan…ready to go, that helps direct their actions.…Here's another look at the breach timeline.…I'd now like to draw your attention to this section,…the time between the discovery of the breach…and Equifax's public disclosure.…This six week gap between July and September…is the subject of much criticism of Equifax.…

They knew about the breach for quite a while…before admitting it to their shareholders and the public.…One can only image the conversations going on…amongst senior leaders about who to tell what, and when.…Incident response plans help answer these questions.…While we strive to protect our systems and information…against a wide variety of threats,…the grim reality is that no matter…how many controls we put in place,…there's still a possibility…that we'll fall victim to a security incident.…