Follow Kara Linkedin Twitter Facebook
Email Kara Email
Legal Issues
May 1, 2016

Creating A Breach Response Plan For A Cyber Attack

Sponsored Content provided by Kara Gansmann - Attorney, Cranfill Sumner & Hartzog LLP

In this series on liability for cybersecurity breaches, the fifth component of a sound cybersecurity plan includes developing a breach response plan for when or if your business is hacked. The breach response plan should identify the employees and vendors who will implement the plan, develop a timeline for your plan, and incorporate the following objectives.
 
Know Your First Steps 

  • Identify what data was compromised. The type of data – whether it’s financial data or consumer data, for example – may dictate your business’s response and implicates the potential for liability. Also, determining whether the data was encrypted and whether and how much data was removed from your system will help you decide what response is necessary.
  • Locate the source of the breach. Not only should you determine the source of the compromise, you should also determine the size of the breach.
  • End vulnerabilities. If a computer is compromised, disconnect it immediately from your network. Ensure your firewalls are still working. Patch any known vulnerabilities in your software.
Know Who to Call
  • Call your cybersecurity experts. These experts will isolate the breach and identify remaining threats.
  • Inform your cyber insurer. Your cyber insurance policy may defray the costs of a response, ranging from an initial $2,000 to $10,000, or even cover the higher costs of litigation arising from the breach.
  • Call your legal counsel. Keep your attorney updated to learn what materials are necessary to retain for any litigation or regulatory investigation. 
  • Notify consumers. North Carolina law requires notification to consumers affected by the breach. Know the laws on how and when to inform consumers. If you have a privacy policy for your customers, ensure compliance with that policy to minimize potential for liability. Liability may turn on the adequacy and timing of your notice to consumers.
  • Contact the North Carolina attorney general. North Carolina law also generally requires businesses to inform the Consumer Protection Division of the state attorney general’s office of a breach involving personal information.
  • Advise your vendors or other business contacts. To further limit your liability, if you have vendor contracts, you may be required to inform vendors of a data breach. Even without a contract, to maintain goodwill with these professional contacts who might be affected by the breach, you should inform them of the breach. 
  • Consider whether a PR professional can help. The damage to your business from a security breach is not limited to the cost to deal directly with the breach. Your reputation can suffer the greatest harm, and having a PR professional on your side can help minimize the impact.
Other Considerations
  • Cooperate with law enforcement investigators and consult with legal counsel.
  • Communicate with your employees about the breach and confirm they know the proper responses to customers’ questions about the breach.
  • Plan your business’s responses to media inquiries and ensure that your employees know who is permitted to respond publically for your business.
  • Strategize ways to keep your business running post-breach. 
Kara Gansmann, a North Carolina native, is an associate in Cranfill Sumner & Hartzog LLP’s Wilmington office, where she focuses her litigation and appellate practice on various aspects of labor and employment law, business and contractual disputes, medical malpractice, and HOA matters. To contact Kara Gansmann, call (910) 777-6055 or email her at [email protected].
 

Other Posts from Kara Gansmann

Wbj insights revised 0510 121615113531
Ico insights

INSIGHTS

SPONSORS' CONTENT
Carolinemontgomery4

Trade Crypto Currency? Chances Are The IRS Knows About It

Caroline Montgomery - Adam Shay CPA, PLLC
Billhunter300x300 b&w

Is Your Phone Listening?

Bill Hunter - Wilmington Design Company
Alyce 4 april242017

Instead of Isolation or Institution, a Third Approach to Senior Housing

Alyce Phillips - Old North State Trust LLC

Trending News

Realtor Submits Site Plans For Luxury Condos, Executive Office Center

Cece Nunn - Aug 22, 2019

Firm's Expansion Expected To Lead To New CRO Jobs In Wilmington

Cece Nunn - Aug 22, 2019

Pawsome News: New Pet Daycare And Retailers Opening In Wilmington

Johanna Cano - Aug 20, 2019

Public Forums Draw Questions About NHRMC's Future

Vicky Janowski - Aug 20, 2019

SummerFest 19 To Include Street Food Cook-off At Battleship Park

Jessica Maurer - Aug 21, 2019

In The Current Issue

MADE: For Retailer, It's In The Bag

Find out more about Holly Aiken Bags, a company that creates handbags and accessories handmade in Wilmington and Raleigh....


Battleship Opens New Tour Section With Food Focus

An area landmark has a new tool for providing insight into the daily lives of the men who served aboard the World War II vessel....


Advocating For Realtors

Anne Gardner, the new CEO of Cape Fear Realtors, talks about her role leading one of the region's largest trade associations....

Book On Business

The 2019 WilmingtonBiz: Book on Business is an annual publication showcasing the Wilmington region as a center of business.

Order Your Copy Today!


Galleries

Videos

WILMA's Leadership Accelerator
Power Breakfast - The H Word (June 13, 2019)
2019 WilmingtonBiz Expo Keynote Lunch - CEO, nCino, Pierre Naude`