EDUCAUSE Live! Webinar
Surviving the Aftershocks of a Cyberattack: Coordination, Communication, and Where to Get Help

Everyone is at risk of a cyberattack. Events such as the breach of sensitive information, denial-of-service attacks, and ransomware make front-page news, disrupt services, steal time from overworked staffers, and damage reputations. From widespread "spray and pray" exploit techniques to targeted attacks, many IT leaders say it's no longer "if" a cyberattack happens but "when." Protection and planning are the keys to prevention, but what if it happens anyway? This session will focus on equipping key individuals (general counsel, university communications personnel, CIO, CISO) with tools to plan for and respond to a cyberattack. These tools include communication plans, incident checklists, decision trees for when to obtain external experts, and a directory of participation roles to ensure the impact of an attack is minimized.

Outcomes

• Develop a directory of key individuals, roles, contact information, and decision points after a cyberattack
• Gain an understanding of the importance of planning
• Use a checklist to prepare for an attack and determine your institution's readiness
• Gain awareness of external expertise and plan for establishing relationships in advance

Supporting Resources

• HEISC Governance, Risk, and Compliance Working Group
• HEISC Information Security Guide