In Get with IT: Once More Into the Breach, Kevin Beaver, information security expert witness with Principle Logic, LLC, writes:
Imagine the scenario: Your network has been penetrated and sensitive data has been exposed. From a public relations mess, to an expensive forensics analysis, to improper handling of breach notifications, to those affected – everything that could have possibly gone wrong has taken place in the aftermath of the breach.
Soon thereafter, your clients and business partners discover what was going on and you end up getting sued. The expert witness for the plaintiff’s attorneys has provided guidance as to what could have been done to prevent this data breach – the systems and controls that should have been in place – as well as how things should have been handled once the breach was detected.
The plaintiff’s legal team sends over document requests asking you to produce….
Read more: securityinfowatch.com.