While no one is immune to cybersecurity threats, planning and preparation are critical to an effective response.

Identify Risks and Build a Plan

Every organization with significant information assets should have a written plan to support its security and privacy programs and to lay out compliance objectives, key people and steps to take in case of an incident. The overall approach to mitigating privacy and security risk and the complexity of these programs varies from company to company depending on size and industry.