Cyber Risk and Incident Response

The terms

• Cyber Incident Response Plan

  A cyber incident response plan is a documented set of roles, steps and contacts that tells an organisation how to detect, contain, remove and recover from a cyber incident.

  Domain: Technology, Cyber and Data

• Cybersecurity Risk

  Cybersecurity risk is the potential for loss from attacks on, or failures of, information systems, including damage to data, operations, finances and reputation.

  Domain: Technology, Cyber and Data

• Incident Response

  Incident response is the organised process of detecting, assessing, containing and recovering from a security incident or operational disruption, and learning from it afterwards.

  Domain: Technology, Cyber and Data

• Insider Threat

  An insider threat is the risk that someone with authorised access, such as an employee, contractor or partner, harms the organisation by misusing data, systems or premises, on purpose or by mistake.

  Domain: Technology, Cyber and Data

• Post-Incident Review

  A post-incident review is a structured look back at a security or operational incident, after it is resolved, to establish what happened, why, how well the response worked and what must change.

  Domain: Technology, Cyber and Data

• Security Operations Centre (SOC)

  A security operations centre is a team, often with dedicated tools and premises, that monitors an organisation's systems around the clock, detects security events and starts the response.

  Domain: Technology, Cyber and Data

• Social Engineering

  Social engineering is the manipulation of people, through deception, pressure or trust, into handing over information, access or money that they would not otherwise give to an attacker.

  Domain: Technology, Cyber and Data