According to Reporter Bob Violino, mitigation and remediation are not the endpoints of cybersecurity incident reports. He interviewed CM Law Co-Founder and Co-Managing Partner Heather Clauson Haughian for a recent CSO Online article on “How to Conduct an Effective Post-Incident Review,” and she recommends to “piece together what actually happened – from the first sign of trouble, all the way through when things were brought under control.”
Heather also suggests conducting a “root-cause analysis,” because you want to figure out why the incident happened in the first place. “Was it a missed software update? A phishing email someone clicked on? Or maybe it was a process that didn’t work as it should have. This is where you dig into the root cause — not just what went wrong, but why it went wrong. If you don’t figure that out, you’re likely to run into the same issue again.”
Read the full article here
CM Law PLLC (cm.law) – formerly Culhane Meadows PLLC – is the largest full-service business law firm in the nation that is both women-owned and managed (WBE). Designed to provide experienced attorneys with an optimal way to practice sophisticated law while maintaining a superior work/life balance, the firm offers fully remote work options, a transparent, merit and math-based compensation structure, and a collaborative culture. Serving a diverse clientele—from individuals and small businesses to over 40 Fortune-ranked companies—CM Law is committed to delivering exceptional legal services across a broad spectrum of industries.
The foregoing content is for informational purposes only and should not be relied upon as legal advice. Federal, state, and local laws can change rapidly and, therefore, this content may become obsolete or outdated. Please consult with an attorney of your choice to ensure you obtain the most current and accurate counsel about your particular situation.
