In addition to providing guidance on how to protect your business (see our article from last week here), the Federal Trade commission provides resources on steps to take if your business does encounter a security breach.
The FTC suggests the following steps:
- Secure your systems and fix vulnerabilities that may have caused the breach.
- Mobilize a response team to prevent additional data loss.
- Assemble a team of experts to help with the response.
- Consider hiring independent forensic investigators.
- Consult with legal counsel.
- Secure physical areas related to the breach by changing access codes.
- Stop additional data loss by taking affected equipment offline immediately.
- Interview people who discovered the breach.
- Do not destroy evidence.
The Data Breach Response Guide for Business can be accessed here.