Solution Brief

Preparation and Practice are the Start to Successful Incident Response

Best Practices from 2,500 Customers: “Build Muscle Memory”
Chevron_White_Jade 1

Organizations have Incident Response plans, but how do they build confidence in the Incident Response function with Executives and Internal Stakeholders? Achieving confidence in the organization’s ability to successfully execute during a cyber crisis requires Preparation and Practice. CYGNVS Customers share their best practices.

Bring in the Broader Team

Incidents today require engagement from a variety of internal teams including risk, compliance, marketing, customer service, and supplier management, as well as external providers like outside counsel and forensics. A big threat to successful incident response is not identifying and engaging these Business Teams and External Providers in an incident response platform, like CYGNVS, before an incident occurs. Onboarding the required people to the platform in advance, allows an organization to define roles, responsibilities, and chain of command and will help enable the broader team to execute seamlessly without confusion and delays. With people constantly moving in and out of the organization and roles, Active Directory enables organizations to easily manage users, including those who need to be notified but aren't directly involved in the response.


Create Playbooks

Once the broader team is in the CYGNVS platform, the next step is to ensure each team knows what to do and when to do it. The CYGNVS Library of Playbooks provide a guided, step-by-step experience so each participant knows exactly what to do. Playbooks in CYGNVS manage dependencies and keep the workflow moving across the broader team. Customers reported organizing activities into workstreams by group or function (e.g. what facts does HR need to gather or what tasks does Outside Counsel need to perform). Import existing playbooks or choose from the CYGNVS library of up-to-date playbooks by incident type, geography and industry – and then customize.


Define Access Control

Who gets to see what and when during a cyber incident is critical to protecting confidentiality and legal privilege. By assigning stakeholders from the broader team into groups and roles, CYGNVS enables fine-grained access control across all artifacts including playbooks, workstreams and tasks.

CYGNVS access controls can span organizations. For example, a “PR team” might span people from marketing, inside counsel, and a PR firm. Access controls for this team can be changed on demand during an incident as needed. Customers have shared that a foundation of access control is critical for incident management. One customer invited over 26 different vendors on the first day of an incident, providing each with access only to those areas where they were needed.

Practice in Tabletop Exercises

With the CYGNVS Tabletop Player, organizations conduct practice exercises inside the platform to run stress tests and scenarios, validate response playbooks, and measure the effectiveness of the response efficacy. A critical value of running a tabletop in CYGNVS is ensuring the broader team gains familiarity and first-hand experience working inside the platform – “train where you fight.”

Customers reported running different types of tabletops across their organizations – a board tabletop on materiality determination, a tabletop with a critical supplier on a breach, an IT/Security tabletop with forensics on technical log analysis. Some customers shared running the same tabletop exercise across divisions and benchmarking divisions on various tabletop success metrics. The platform can create After Action Reports (AAR) that identify areas of improvement, and these reports can be securely shared through CYGNVS with Regulators and others.


Updating Response Plan

With the threat landscape, technology and macro-environment changing constantly, CYGNVS makes it easy to conduct updates to the incident response plan and revise for changes.

CYGNVS recommends quarterly plan reviews as a best practice to ensure compliance and maintain readiness. Remember: in cyber incident response, it's not just about having a plan—it's about building and maintaining the organizational muscle memory to execute it flawlessly when it matters most.

Amtex Systems partners with CYGNVS™ to provide Enhanced Cyber Resilience solutions in India

 

News: 
March 23, 2023

With the growing rise of cyber threats in India, CYGNVS will enable Amtex to provide a comprehensive cybersecurity capability for organizations to remain resilient in the face of cyber attacks

India – March 23, 2023  Amtex Systems, among the leading IT consulting & services companies in New York and India, today announced its partnership with CYGNVS Inc., a pioneering guided cyber crisis response platform, to help reduce potential impact before and during a cyber crisis through preparation and practice. With CYGNVS, Amtex can quickly assemble their team of cyber crisis responders in a safe, secure environment out of band from internal channels, should a cyber threat arise.

According to a recent study, India was a top cyber-attack target last year and the country witnessed 13.91 lakh cyber-security incidents in 2022 and cyber- attacks on Indian Government agencies more than doubled. With the country’s rapid digitization, cybercriminals are finding emerging avenues to exploit vulnerabilities in India’s digital infrastructure.

Earlier this year, CYGNVS emerged from stealth to unveil its pioneering guided cyber crisis platform, purpose-built to empower organizations worldwide to stay Connected, Confident, in Control and Compliant as they prepare for and respond to any cyber crisis. The platform converts static breach response plans into interactive and actionable processes and checklists for organizations that can be easily communicated and updated as threats and regulations change.

The partnership will enable Amtex to resell the CYGNVS platform and provide implementation and integration for clients in India and Middle East. Amtex also runs the National Emergency response service (NERS) 112, in the state of Tamil Nadu and is responsible to handle Physical, Cyber and Medical emergencies, for which it will effectively use the platform.

“Cyber is a global threat and organizations everywhere are under attack. It is not a question of if the next cyber crisis will happen but when. CYGNVS is excited to partner with Amtex and bring a guided cyber platform to the Indian and Middle Eastern markets, further improving cyber resiliency in the region,” said Arvind Parthasarathi, Founder and CEO of CYGNVS. “This partnership aids in our mission to lower cyber risks around the world by addressing the critical areas of preparation and response.”

“We are pleased to partner with an innovative cyber response platform like CYGNVS to reduce the impact of a cyber-attack and make ourselves and our clients well prepared for potential crises,” said Sunny Pokala, Chairman of Amtex Systems. “Amtex is prepared to mitigate, respond to and manage any future cyber-attack with the support of CYGNVS.”

To further address the increasing number of cyber-attacks in India, Mr Pokala will be speaking at the 2023 UmagineChennai International Conference, Asia’s largest tech summit to share Amtex’s vision in tackling the risks associated with cyber-attacks. His seminar, “Accelerating Technology Growth through Robust Cyber Resilience,” will take place on Friday, March 24, at 1:45 p.m. IST. To learn more, please visit https://www.umaginechennai.com/#/speakers

About Amtex Systems Inc.
Amtex is a globally acclaimed front-runner in the realm of cutting-edge technologies. Its objectives and aspirations closely align with innovations that directly impact the betterment of lives. Spanning its global imprint over 4 continents, Amtex has formed long-lasting relationships with numerous IT giants like Salesforce, AWS, Azure and TIBCO. It has curated a multitude of successful products like Securra Health, Huut and CONTINYOU

About CYGNVS Inc.
CYGNVS is a guided cyber crisis response platform purpose-built to empower organizations to be Connected, Confident, in Control and Compliant before, during and after a cyber crisis. Backed by a $55 million series A round from Andreessen Horowitz, Stone Point Ventures, and EOS Venture Partners, CYGNVS is headquartered in Silicon Valley, with offices in Canada, India, and Ireland. For more information, visit www.CYGNVS.com.

For More Information, please contact: Samheetha, 9731054124, samheetha@prhub.com

Column 2