Special Considerations
Insider attacks require the assistance of other players in the company. The human resources department is a key player in the incident response process. It can advise the incident response team regarding employee rights and responsibilities and the disciplinary or termination process. The department probably has people skilled in interviews that could be useful when confronting suspects, victims, or witnesses. HR should be informed as soon as an investigation indicates the potential involvement of an employee.
The corporate legal team is also a key player. This team can provide legal advice on searches and employee privacy issues. It also can represent the company’s interests when matters of potential liability are discussed. ...
Get Incident Response: A Strategic Guide to Handling System and Network Security Breaches now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
