How to conduct an effective post-incident review

How to conduct an effective post-incident review

Let’s says your organization has experienced a cybersecurity incident that had no material impact on the business but nevertheless rattled the security team and got the attention of senior management. Somehow the attack slipped past the monitoring tools in place before it was detected and mitigated. It was a close call. So now what? This is when a post-incident review, a key component of any cybersecurity program, needs to kick in. These initiat…