Does your credit union really need an Incident Response Policy & Plan?
Yes. Unlike some other policies, a professional, practical Incident Response Policy and Plan is actually a useful executable guide to dealing with chaos that can surround a breach. If done properly, the IRP is a manual that creates a team of credit union executives that have roles to execute that are important to protecting the credit union and the credit union's members. The IRP will tell your team exactly what they need to do, who they need to contact, and what to say and not say. During a breach and in the ensuing aftermath, your credit union will need clarity and direction and an Incident Response Policy and Plan created by CUC will provide both.
Is an IRP a compliance requirement?
Yes, and we are seeing the examiners becoming more strict about it. FFIEC guidelines require your credit union to have a policy and plan to respond to breaches of information security at your credit union. Incident response policy and plans must be independent of particular hardware platforms, operating systems, and applications. The primary focus of the document is detecting, analyzing, prioritizing, and handling incidents. The plan identifies and describes the roles and responsibilities of the Incident Response Team.
What is digital forensics?
Depending on the type of breach you experience, it is an area of knowledge your technology staff will need to identify and remediate the cause of the breach. Digital forensics is the investigation and analysis of material found in digital devices. It requires a high level of knowledge and experience with various software and hardware.
CUC can help your credit union if you have a breach.
If your credit union needs help investigating and remediating an incident or breach of your information security, we have experienced engineers that can come and help your credit union resume normal operations.
If you have an immediate problem or just want to learn more about CUC, you can contact:
Paul Elder 614-848-5400 ext 121 or email Paul Larry Krietemeyer 614-848-5400 ext 143 or email Larry
