Creating A Healthy Cybersecurity Framework

Maintaining cybersecurity can seem like a daunting task, weighted with uncertainty and expense, but in practice it can be made manageable. This Today’s General Counsel article suggest an approach borrowed from routine healthcare, based on regular assessments and a set of clear and actionable diagnostic questions. For example, do you have a detailed incident response plan? Have you conducted a test run? Do you have cyber insurance, and do you fully understand its terms? Are cybersecurity expectations reflected in your vendor agreements? Fielding questions like these, the authors say, is a necessary first step in establishing a security risk-management framework. Details will vary, but a critical component is certain to be training employees and organizational partners. A cybyersecurity framework “will only be as strong as your least security-conscious employee or vendor.”