Questions,Answers
Do you have any sample communication or press releases in the event of a breach?,"Typically, communications are very customized to the organization, event, and those impacted. Organizations will want to work with their communications and legal teams for this type of messaging, espcially if an event has an external impact or if the organization is subject to a regulatory requirement to disclose.
However, standard information that is typically in a template is the following. Only state what is known and factual and avoid sharing technical details, admission/fault, misleading information, and confidential information.
1) A brief description and acknolwedgement of the situation
2) Scope and impact to the extent it is known/confirmed
3) Current status
4) Current status
5) Actions taken
6) Guidance for those affected
7) An idea of when the next update/communication will be published"
"For a small entity using backup like carbonite and monitoring like Webroot and what Microsoft offers, are the initial protections seemingly adequate?",
Are there templates of policies that could help us develop a policy for our organization?,We do have policy templates and can help develop policies for your organization. Please feel free to contact us directly to set up some time for us to further discuss expectations.