The FBI calls (or shows up) and tell you that your servers are attacking other organizations. What do you do?

Read More

When you identify a student who is experimenting in hacking and disrupting systems, do you have plan for redirecting student back to “good side” of cybersecurity?

Read More

In the event of a cybersecurity incident, how long will it take you to restore critical systems? Have you tested restoration?

Read More

Do you have an agreed upon list of systems in priority order for restoration?

Read More

Do you have a framework for tracking what is in your systems? Can you track data in systems similar to ingredients tracking in foods?

Read More

Do you have a strategy for communicating cybersecurity risk with your stakeholders?

Read More

What is the order in which you bring things back online after a cybersecurity incident, outage or disaster? Do you know how that varies by time of the month/year?

Read More

Do you have a failsafe option to turn off multifactor authentication (MFA) in the event that MFA is broken or unavailable?

Read More

When have you tested your backups by restoring them to production? How frequently do you do this?

Read More

Which non-IT staff are involved in incident response? When do you bring them into the process?

Read More