How do I prepare my business?
Whilst it is difficult to predict when the organisation is going to be attacked, the business needs to assume that it is always under attack. By preparing, the business is quicker to respond to a successful attack and will have a recovery plan in place so that there is minimal impact to the business.
Cyber Protection: Prepare Stage
ANALYSE
To assess an asset’s risk, it is important to measure:
- The overall threat to the asset (both inside and outside the organisation);
- Its intrinsic and environmental vulnerabilities;
- The cost of damage, interruption, and recovery should it be compromised.
Once the risks are identified, they should be compared relative to each other, to identify those which need prioritisation and warrant the most attention.
PLAN
It is important to continually monitor and review the risk environment; to detect any changes in the context of the organisation, and to maintain an overview of the complete risk management process.
What services should I consider at the prepare stage?
Know the security priorities for your organisation
Understand how you can improve your organisation's cyber readiness.