Have incident response procedures
Many organizations are not prepared to manage incidents. When an incident occurs, panic breaks out… Devise a Incident Response Procedures and keep it up to date: this will help you in case of an incident. Recent attacks show that all industries are potential targets. Good incident management is vital to the survival of the organization.
The Incident Response Plan describes what needs to be done in case of an incident, depending on the type and severity of the incident. In the event that you do not have an actual incident, make sure to test your Incident Plan at least once every year. Senior Management, Communication and Legal should also be included in the test.
Do not forget to include your hosting partners, cloud partners, managed service partners and external service providers into your Incident Response Plan. Make sure they are also aware of your plan and participate in any tests you perform