Although at their heart they focus on post-breach mitigation and remediation, cyber incident response plans are emerging as a very important cyber security control when it comes to reducing overall risk – particularly the risk of having to claim against cyber insurance.
That is according to a report produced by professional services firm Marsh McLennan, through its Cyber Risk Intelligence Centre (Cric).
Titled Cybersecurity signals: Connecting controls and incident outcomes, the report revealed that organisations that conduct regular tabletop war game exercises and scenario-based breach response drills are 13% less likely to fall victim to a material cyber incident than those that do not.
“Marsh has long advocated proactive cyber incident response planning as a tool to help organisations effectively and efficiently respond to and recover from a cyber attack,” said Tom Reagan, global cyber practice leader at Marsh McLennan.
“What our latest research confirms is that thoughtful planning also drives secondary benefits like positive security behaviours and strong control implementations, which help build more organisational resilience and reduce breach incidents,”…
