Determine the Cost of the Incident

I l @ ve RuBoard

Calculating the cost of an incident will give you a measurement of the importance of security for your organization. You may find calculating the cost of this incident useful in explaining to management that security is important to your organization.

The business impact analysis determines the financial impact which a security incident has on the organization. It is based on product revenues and the impact of peak seasons. It also takes into account the upstream and downstream implications and includes estimated costs associated with implementing determined recovery strategies. The comparison of actual losses to the estimates will help improve the ability to better predict the business impact of future disruptions.

Legal Reporting

In many industries, especially financial services, security incidents have to be reported to the governing body if they cause a significant financial impact.

In any case, a financial impact analysis will generally be required so that the appropriate information can be presented to the owners of the organization.

Learning from Mistakes

Document and review your lessons learned from going through the process of recovering from a root compromise. This will help you decide on the appropriate revisions necessary for your security policy.

I l @ ve RuBoard