Cyber Incident Response

Cyber incidents and data breaches are an unfortunate reality of business today. While you cannot eliminate all risks, you can prepare to deal with incidents effectively and efficiently.

A robust incident response plan is a critical component of any cyber security strategy including detection and containment of cyber attacks, investigation and recovery from incidents as well as lessons learned to implement remediation measures preventing future similar incidents.

With a well-defined incident response plan in place, your incident response team will be ready to respond to breaches quickly and effectively. The priority in such cases is to contain the threat, and then implement remediation measures to prevent future incidents. We help you proactively address vulnerabilities to protect your assets and safeguard the confidentiality, integrity and availability of sensitive information.

Matthias Bossardt

Partner, Head of Cyber & Digital Risk Consulting

KPMG Switzerland

mail
call

How can KPMG help you?

We help you prepare for a cyber emergency – and get your response right if worse ever does come to the worst critical path.

Incident readiness and response

It’s essential to have a robust incident response plan that outlines the steps to be taken in the event of an incident. We support you in developing and improving your incident readiness and response capabilities through communication protocols and escalation procedures. Among other things, this involves defining roles and responsibilities for each member of your incident response team, and selecting and training relevant members from IT, legal, public relations and human resources. Once a threat has been contained, your incident response team can begin the investigation process to determine the source of the breach, the extent of the damage – and future mitigation strategies.

Crisis management

The first step in incident response is to identify and contain the threat. We help you define procedures to isolate your affected systems and devices – quickly – to prevent further damage. As part of crisis management, you should have an incident response team in place and ready to manage your response at a moment’s notice. If the worst does happen, we can support you through crisis management and the remediation process. This may involve updating software and systems, patching vulnerabilities, and deploying additional security measures to prevent future incidents.