Do your 2024 plans include steps to improve your cyber security incident response plan? If so, what steps are you planning to take?

Threat Intelligence & Incident Response Resilience

2.4k views2 Comments

Sort by:

Director of Cybersecurity Data and App Protection in Healthcare and Biotech2 years ago

We use table top exercises, purple team, and red team activities to continuously pressure test our processes, people, and tools. All of that activity leads to improvements in incident response plans, but also the tools and people as well.

Director of Systems Operations in Healthcare and Biotech2 years ago

One would hope every year the plan is to continuously update the incident response plan, and communication improvements is always high on the list. New employees, new proceses, new procedures, redefining the communication strategy is essential.

Content you might like

Should public companies be required to have at least one board member with cyber experience?

Yes72%

No16%

It depends on the size/industry10%

I’m not sure…

View Results

Do you currently have dedicated employees for offensive security (red teaming, pentesting, etc)?

Yes, one dedicated employee6%

Yes, multiple dedicated employees61%

No, but offensive security is covered by one or more employees as part of their role17%

No — we don’t handle offensive security internally11%

Other/don’t know6%

View Results

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP.

AI deepfakes have cost the industry over $200M this year. As CISOs, can we scale detection fast enough, or is regulatory pressure the only way to drive adoption?

If you’ve worked with mobile applications and have experience scanning code, either for vulnerabilities or to ensure best practices, what tools or solutions would you recommend for iOS and Android platforms?