APPROACH

Assessing actual and potential risks … is a never-ending task … continuous capture of threats, analysing impacts, modelling policy, crafting mitigation controls … its this mindset, to be always ready to learn and assess rather than act an after thought is key to your ongoing success.

Building and deploying policy and mitigations is never simple … often it is limited by the tools and skills at hand in your team and the technologies you can deploy. Often challenged by data quality, steep learning curves, partnerships, complex setup and technical limitations … they don’t have to be!

You can’t just roll technology out and hope it will all work … you have many people across the organisation to onboard, train, validate, test … creating a sustainable risk culture is not straight forward, look to your team and technologies to get everyone onboard and engaged.

Just because you have deployed your technology … doesn’t mean it is 100% effective and fool-proof. You have to test any actions, integrations, automation, alerts, logins, data quality etc … feed all this back into your implement and engage activities … and keep testing until you feel (more) confident!

Your monitoring environment, team and skills may differ wildly depending on your organisation. How events trigger, teams mobilise, impact assessed, priorities triaged … will depend on your preparation, partnerships and tech … its crucial to create the right monitoring environment and test test test!

An incident occurs … it can scale from an individual request to a major crisis! Being ready, means you have tools in place … technology will be key in your incident and crisis management teams, as they capture, assess, act, collaborate, communicate and adapt … based on previously tested scenarios

Incidents and crises are rarely over the minute your response ramps down … the recovery of your people, operations and business doesn’t just immediately return to normal. Continue to track and gauge the return and use the impact and challenges to further assess risks in future.

You may be subject to internal or external audits and investigations. Your overall preparation, response and recovery needs to be cleared logged and managed to highlight key objectives, decisions, challenges and resolutions. Your technology needs to support this to adhere to any compliance and regulation.

Learning is not something you do as an after thought … it needs to be a continuous activity to learn from all the other key areas of the framework … feed back any improvements and challenges to ensure your efforts continue to evolve and adapt. Look to your tech tols to analyse, suggest and adapt.