Cyber Security Works

Goals for Cyber Incident Response

When a cyber security incident occurs, timely and thorough action to manage the impact of the incident is critical to an effective response process. The response should limit the potential for damage by ensuring that actions are well known and coordinated. Specifically, the response goals are:

1. Preserve and protect the confidentiality of constituent and employee information and ensure the integrity and availability of the company’s systems, networks and related data.
2. Help company personnel recover their business processes after a computer or network security incident or other types of data breach.
3. Provide a consistent response strategy to system and network threats that put company data and systems at risk.
4. Develop and activate a communications plan including initial reporting of the incident as well as ongoing communications, as necessary.
5. Coordinate efforts with external Computer Incident Response Teams and law enforcement.
6. Minimize the company’s reputational risk

• Infrastructure security audit for potential vulnerabilities
• Check the quality of the security system on a virtual server (Linux)
• Check and remove unused plugins and plugins with duplicate functionality
• Organize an authorization system for key users using 2FA or blocking by IP
• Set up and monitor the firewall
• Eliminate potential vulnerabilities
• Set up a tracking authorization system to log all the WordPress and Cpanel login attempts
• Scan for malicious code (send reports if requested) – (regularly, once a week)
• Make backup copies of the site – (regularly, once a week)
• Organize an automated backup system (subject to the purchase of extra disk space by the owner)
• PDF Report with a detailed breakdown of work performed, system’s vulnerabilities and recommendations for improvement

• Immediate response in the event of suspicious activity
• In case of unauthorized access or when an infection is detected, we restore a stable backup and restore the site to working capacity (from 6 to 48 hours, depending on the chosen backup method)
• Find out how, when and by whom the attack was performed
• Take measures to prevent possible infections and penetrations in the future.
• Provided actionable recommendations to secure the system and prevent future penetrations.

PIPEDA applies to private-sector organizations across Canada that collect, use or disclose personal information in the course of commercial activity.

• Infrastructure security audit for potential vulnerabilities
• Check the quality of the security system on a virtual server (Linux)

By making your organization PIPEDA compliant, RACCUN’s team will ensure that you are ready for OPC audit.

PIPEDA gives the OPC the authority to audit an organization’s privacy practices when the OPC has reasonable grounds to believe the organization is not fulfilling its obligations under Part 1 of the Act or is not respecting the recommendations of Schedule 1.

What can lead to an audit?

• a group or series of complaints about a particular organization’s practices;
• information obtained during an investigation;
• information provided by an individual under the whistleblower provision; or
• an issue receiving public attention.

Our team will work to ensure that your organization is PIPEDA compliant with its 10 fair information principles to protect personal information, which are set out in Schedule 1 of PIPEDA.

The principles are:

1. Accountability
2. Identifying Purposes
3. Consent
4. Limiting Collection
5. Limiting use, disclosure and retention
6. Accuracy
7. Safeguards
8. Openness
9. Individual Access
10. Challenging Compliance

Based on the nature of your business and the industry, we will develop and help you implement a PIPEDA-compliant security policy to protect personal information.

We will make sure to address any known vulnerabilities through regular security audits and/or testing. What’s on you is to make your employees aware of the importance of maintaining the security and confidentiality of personal information, and hold regular staff training on security safeguards.

In order for companies to qualify for data breach liability insurance (cyber or cyber risk insurance), they must meet certain technical and internal policy requirements. For example things like: Encryption, Authentication, Anti-Virus, Firewall, Spam Filtering, Device Inventory etc. Our team can help you to comply with all the requirements to obtain the insurance coverage that you need.