Scarinci Hollenbeck, LLC, LLCScarinci Hollenbeck, LLC, LLC

Firm Insights

Cybersecurity Response Tips for Small Businesses

Author: Scarinci Hollenbeck, LLC

Date: May 15, 2015

Key Contacts

Back

The Department of Justice (DOJ) is the latest U.S. government agency to offer cybersecurity response tips to the business community.

Late last month, the Securities and Exchange Commission also weighed in on cybersecurity response tips.

The DOJ cybersecurity response tips provides “best practices” to assist organizations in preparing a cyber incident response plan. It is specifically intended for small businesses that often lack the resources (both technical and financial) of larger organizations. Below is a brief summary of the DOJ’s recommendations for before, during, and after a cyberattack:

Before a Cyberattack

  • Identify mission critical data and assets (characterized as the “Crown Jewels” by the DOJ) and implement tiered security measures to safeguard those assets.
  • Create an actionable response plan that provides specific, concrete procedures to follow in the event of a cyber incident and ensure that all personnel who have computer security responsibilities are properly trained.
  • Have procedures in place that will permit lawful network monitoring, which can be essential to detect and respond to a cyberattack.
  • Retain legal counsel who is familiar with legal issues that arise during cyber incidents.
  • Develop relationships with relevant law enforcement agencies, outside counsel, public relations firms, and investigative and cybersecurity firms that you may need to retain in the event of an incident.

During a Cyberattack

  • Make an initial assessment of the scope and nature of the incident, particularly whether it is a malicious attack (insider or outsider) and/or a technological malfunction.
  • Implement your written cyber incident response plan.
  • Collect and preserve data related to the incident, which should include: “imaging” the network; retaining all logs, notes and other records; and maintaining records of ongoing intrusions.
  • Notify all relevant parties, such as company personnel, law enforcement, and potential victims.
  • Avoid using compromised systems and do not “hack back” against the perpetrator.

After a Cyberattack

While it seems that everyone has cybersecurity advice these days, given the authority of the DOJ to prosecute organizations that fail to properly address a data breach, the agency’s guidance should not be overlooked. Overall, it provides a useful roadmap of the policies and procedures that it expects to see implemented at U.S. businesses.

No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

Scarinci Hollenbeck, LLC, LLC

Related Posts

See all
A Whistleblower Just Filed a Complaint Against Your Company: Here's What to Do Now post image

A Whistleblower Just Filed a Complaint Against Your Company: Here's What to Do Now

Few situations create more uncertainty than learning that an employee has filed a whistleblower complaint. Questions arise immediately: Is the allegation legitimate? Should the employee be placed on leave? Do we need to notify our insurance carrier? Are we now prevented from disciplining the employee if there are unrelated ongoing work related issues? There is […]

Author: Sean M. Pena

Link to post with title - "A Whistleblower Just Filed a Complaint Against Your Company: Here's What to Do Now"
Assignment for the Benefit of Creditors: An Alternative to Bankruptcy for Distressed Businesses post image

Assignment for the Benefit of Creditors: An Alternative to Bankruptcy for Distressed Businesses

When a business reaches the point where it can no longer service its debts or otherwise resolve its liabilities, management is often faced with a difficult question: is a bankruptcy filing necessary or is there another way to perform an orderly liquidation or sale of the business assets? While Chapters 7 and 11 of the […]

Author: John D. Giampolo

Link to post with title - "Assignment for the Benefit of Creditors: An Alternative to Bankruptcy for Distressed Businesses"
Breaking Down New Jersey’s “Mansion” Tax: What Buyers and Sellers Need to Know post image

Breaking Down New Jersey’s “Mansion” Tax: What Buyers and Sellers Need to Know

For many years, the New Jersey Mansion Tax has been a significant consideration in high-value real estate transactions. Recent legislative changes, however, have substantially altered how the tax operates, including who is responsible for paying it and the amount owed in certain transactions. Whether you are purchasing, selling, or investing in New Jersey real estate, […]

Author: George McGowan

Link to post with title - "Breaking Down New Jersey’s “Mansion” Tax: What Buyers and Sellers Need to Know"
Estate Planning for Digital Assets Under New Jersey Law post image

Estate Planning for Digital Assets Under New Jersey Law

As our personal and financial lives increasingly move online, estate planning must evolve to address a new category of property: digital assets. From email accounts and social media profiles to cryptocurrency and cloud-stored business records, these assets often carry both financial and sentimental value. Yet, without proper planning, they can become inaccessible—or even lost—upon incapacity […]

Author: Marc J. Comer

Link to post with title - "Estate Planning for Digital Assets Under New Jersey Law"
The Role of Representation and Warranty Insurance in M&A Transactions post image

The Role of Representation and Warranty Insurance in M&A Transactions

In today’s mergers and acquisitions market, representation and warranty (R&W) insurance has become a common feature of deal negotiations. Once used primarily in larger transactions, R&W insurance is now frequently incorporated into middle-market deals as buyers and sellers look for efficient ways to allocate risk and close deals. When structured properly, R&W insurance can help […]

Author: George McGowan

Link to post with title - "The Role of Representation and Warranty Insurance in M&A Transactions"
You Just Received a Federal Grand Jury Subpoena in New Jersey: Now What? post image

You Just Received a Federal Grand Jury Subpoena in New Jersey: Now What?

Receiving a federal grand jury subpoena is not something most businesses or individuals anticipate. While it can be concerning, a federal grand jury subpoena does not necessarily mean that you are being accused of wrongdoing. It does, however, mean that a federal criminal investigation is underway and that federal prosecutors believe you may possess information […]

Author: Sean M. Pena

Link to post with title - "You Just Received a Federal Grand Jury Subpoena in New Jersey: Now What?"

No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

Sign up to get the latest from our attorneys!

Explore What Matters Most to You.

Consider subscribing to our Firm Insights mailing list by clicking the button below so you can keep up to date with the firm`s latest articles covering various legal topics.

Stay informed and inspired with the latest updates, insights, and events from Scarinci Hollenbeck. Our resource library provides valuable content across a range of categories to keep you connected and ahead of the curve.

Let`s get in touch!

* The use of the Internet or this form for communication with the firm or any individual member of the firm does not establish an attorney-client relationship. Confidential or time-sensitive information should not be sent through this form. By providing a telephone number and submitting this form you are consenting to be contacted by SMS text message. Message & data rates may apply. Message frequency may vary. You can reply STOP to opt-out of further messaging.
“If you would like to submit a file, please email it directly to info@sh-law.com.

Sign up to get the latest from the Scarinci Hollenbeck, LLC attorneys!