{"id":242145,"date":"2021-05-28T09:52:00","date_gmt":"2021-05-28T09:52:00","guid":{"rendered":"https:\/\/www.b-c-training.com\/?post_type=bulletin&p=242145"},"modified":"2022-11-23T09:54:44","modified_gmt":"2022-11-23T09:54:44","slug":"the-differences-between-a-cyber-and-a-normal-incident","status":"publish","type":"bulletin","link":"https:\/\/www.b-c-training.com\/bulletin\/the-differences-between-a-cyber-and-a-normal-incident\/","title":{"rendered":"The Differences Between a Cyber and a ‘Normal’ Incident"},"content":{"rendered":"\n

This week, to celebrate our updated cyber course,\u00a0BCT Certificate in Cyber Incident Management<\/a>, we take a look back at some of the similarities between cyber and ‘normal’ incidents!<\/p>\n\n\n\n

There are of course many similarities between a cyber and ‘normal’ incident, in that the incident could have serious consequences, needs an incident management infrastructure to manage the incident and has a crisis communications element. Secondly, a cyber incident may cause a normal incident, so an attack on a power grid may lead to a power company having to manage customers with no power or a ransomware attack may impact company systems, leading to the organisation having no access to IT or telephony systems. There are a number of differences between the two types of incidents and these may cause you to manage a cyber incident differently, even if the consequence of the attack is the same.<\/p>\n\n\n\n

The main differences are as follows:<\/strong><\/p>\n\n\n\n

1. A cyber attack can result in high-risk consequences for an organisation, in terms of impact and reputation. It also has high-risk consequences for those responding! Equifax lost their CEO, CIO and CSO after their massive loss of data in the autumn of 2017. The senior executives of other organisations who have had a cyber breach have suffered the same fate.<\/p>\n\n\n\n

2. Due to the reporting requirements of data breaches and especially the reporting requirements of GDPR, it will be difficult for the organisation to keep quiet about the incident, which means damage to the organisation’s reputation is very likely. The impact of a cyber incident can go way beyond the immediate victim – the organisation. Under GDPR you are also required to contact those people who have also been affected, so once again a cyber incident could impact many more stakeholders than a “normal” incident. Equifax lost 143 million records, which is a lot of people to contact and for the organisation to have a negative impact on.<\/p>\n\n\n\n

3. An office block burning down is not very interesting in terms of news coverage, but a cyber attack on a well known company attracts more public and media attention. As cyber attacks are happening more frequently now and to more and more different organisations, will the interest wane and the public and media attention turn to a different threat?<\/p>\n\n\n\n

4. The consequence of an attack may be invisible. A hacker could’ve been in your systems for 200+ days and taken all the information assets, data and intellectual property they want, but there could be no actual impact on the organisation\u2019s IT systems and still be running normally. You may not know that you have had an incident until someone tells you. You can\u2019t manage an incident if you don\u2019t know one is taking place. If your headquarters building goes on fire, the incident will be entirely obvious. It is difficult to explain how you had cyber incident weeks, months or, in some cases, years ago and you have only just noticed now.<\/p>\n\n\n\n

5. If the cyber attack is targeted against your organisation, you have the additional issue of trying to manage the incident and recover from it, at the same time knowing that someone has done this deliberately. You would have good reason to worry about what else they might have done and whether they could do the same again or something worse next time. What can the organisation do to protect itself? Sometimes the feeling is similar to being burgled; it takes a long time to feel safe again and in the back of your mind you are always thinking that it might happen again.<\/p>\n\n\n\n

6. At the beginning of the incident, you may not know the full impact of the breach and it may take several days to understand the full consequences, what has occurred and what you have lost. At the same time, your customers, staff and regulators may be putting you under a lot of pressure to give them all the information on the incident. If your initial assessment is wrong and you have to admit that the loss of data was greater than you said initially, at best you look incompetent and at worst dishonest, as you were trying to cover up the full extent of the breach. Under GDPR you only have three days to provide information about the full extent of the breach and who has been affected to the Information Commissioners Office.<\/p>\n\n\n\n

With a cyber event, the impact could be wider, the consequences greater, the public scrutiny more intense and there is also the issue of trying to manage an incident without really knowing what happened, who did it and what has been lost. The stakes are higher and the impact of failure greater, especially on senior management and the organisation\u2019s reputation.<\/p>\n\n\n\n

\n\n\n\n

Watch our free cyber webinar recordings to inspire you or learn more! Click here ><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

This week, to celebrate our updated cyber course,\u00a0BCT Certificate in Cyber Incident Management, we take a look back at some of the similarities between cyber and ‘normal’ incidents! There are of course many similarities between a cyber and ‘normal’ incident, in that the incident could have serious consequences, needs an incident management infrastructure to manage […]<\/p>\n","protected":false},"author":2,"featured_media":242146,"template":"","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":""},"_links":{"self":[{"href":"https:\/\/www.b-c-training.com\/wp-json\/wp\/v2\/bulletin\/242145"}],"collection":[{"href":"https:\/\/www.b-c-training.com\/wp-json\/wp\/v2\/bulletin"}],"about":[{"href":"https:\/\/www.b-c-training.com\/wp-json\/wp\/v2\/types\/bulletin"}],"author":[{"embeddable":true,"href":"https:\/\/www.b-c-training.com\/wp-json\/wp\/v2\/users\/2"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.b-c-training.com\/wp-json\/wp\/v2\/media\/242146"}],"wp:attachment":[{"href":"https:\/\/www.b-c-training.com\/wp-json\/wp\/v2\/media?parent=242145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}