Incident Response: A Strategic Guide to Handling System and Network Security Breaches

Special Situations

Certain situations are ripe for the onset of an insider attack. One of the most dangerous situations for a company to handle is the termination of key employees.When senior managers are terminated, the prospect that intellectual capital might be removed is extremely threatening to a company’s reputation and viability. Obviously, both HR and the legal department should be involved from the beginning when a senior manager is removed for cause (or leaves to join a competitor). The person’s network and physical access should be terminated, preferably while the employee is in an exit interview. The employee should then be allowed to remove any personal items from his or her office while under the supervision of another trusted ...