Cybersecurity teams in every organization must have an updated incident response (IR) plan ready so that they can respond more quickly and effectively when an incident happens. A proper IR plan should comply with relevant cybersecurity policies.
Assess one applicable policy of governance, risk, and compliance associated with cybersecurity and how it will have an impact on the IR plan. Examples you might use include, HIPPA, GDPR, PCI or other regulatory or legal requirement to protect sensitive data.
Are there differences in how the data would be handled by industry or size of the organization?
How does the IR address risk?
