WE1&2

You’ve Been Attacked –
The Response

The response:

1.Determine if you are still under attack

•If yes, take immediate steps to prevent it or eliminate its impact

2.Understand the attack and its’ magnitude (to later assess the damage)

3.Take preventive actions for future occurrences

4.Assess and repair damage

5.Gather litigation evidence

Now that you’re no longer under attack –

start to gather forensic evidence….


	With these principles in mind, using initial inspection,
		•Determine if you are still under attack
		–if attack continues, take immediate steps to prevent it or eliminate its impact
		–Apply forensics: understand the attacks and its magnitude (to later assess the damage)
		–Take preventive actions for future occurrences
		–Assess and repair damage
		–Gather litigation evidence as recovering stolen or damaged assets may require some type of legal action against the offending party.