Incident Response Plan

Given the likelihood of a cyber incident of any given nature, it is paramount for an organization to spend the time and resources required to develop an incident response Plan (Cyber Security Incident Response Plan or CSIRP) in order to be prepared to mitigate as much as possible the risks inherent thereto.

Once the plan has been drafted, the individual members of the organization’s Cyber Security Incident Response Team (CSIRT) will be designated and called upon once or twice a year to participate in cyberattack simulations according to likely scenarios in order to  sharpen their skills and improve the plan, as the case may be.

This level of preparedness often constitutes an important consideration when an organization seeks to subscribe to cyber-insurance products both for eligibility and affordable insurance premiums. As a result, the availability of a CSIRP can play an important role within a risk management strategy as it enhances the capacity of an entity to anticipate, react and recover from a cyber-incident. Failing to do so may expose the organization to compliance issues as well as aggravated operational, liability and reputational risks.

With its experience as General Counsel, DUBÉ LATREILLE is ready to assist your organization both in preparing for and in responding to a cyber incident.