Skip to main content

Are you a Firefighter?

Published on: 5 Aug 2020
Category:

Are you a Firefighter?

A firefighter would be working in the Cyber Security Incident Response Team (CSIRT). Any company with an online presence makes it a vulnerable global target to cyber threats with a challenging cyber-attack landscape pursued by  an intelligent and evolving enemy. 

Incident response (IR) is a structured methodology for handling security incidents, breaches, and cyber threats. A well-defined incident response plan allows you to effectively identify, minimize the damage, and reduce the cost of a cyber attack, while finding and fixing the cause to prevent future attacks.

During a cybersecurity incident, security teams will face many unknowns and a frenzy of activity. In such a hectic environment, they may fail to follow proper incident response procedures to effectively limit the damage. This is important because a security incident can be a high-pressure situation, and your IR team must immediately focus on the critical tasks at hand. Clear thinking and swiftly taking pre-planned incident response steps during a security incident can prevent many unnecessary business impacts and reputational damage.

Links with the CyberEPQ Modules:
6.  Intrusion Detection and Analysis, Incident Investigation and Analysis
9.  Information Security Identity and Access Management
11. Risk Assessment and Management and Information Security Governance and Management

What does a Firefighter do?
A Fire-fighter is expected to detect and respond to cyber security incidents.  As a firefighter you will continually grow your skills and experience. When not responding to incidents, you may be... Read more