Incident Response - Discernible Inc (Page 2)

Sign in Subscribe

Incident Response

A collection of 39 posts

📬 Mailbag: How do you manage/balance truthful communications about an incident/breach while mitigating legal exposure?

Incident Response

📬 Mailbag: How do you manage/balance truthful communications about an incident/breach while mitigating legal exposure?

A reader asks: How do you manage truthful communications about an incident while mitigating legal exposure?

“The solution is not buying another server, it’s having better communications.”

Guest Post Featured

“The solution is not buying another server, it’s having better communications.”

Q&A with DEF CON founder and CEO Jeff Moss on the value of security communications.

📬 Mailbag: Are there any examples of good incident response communications?

Incident Response

📬 Mailbag: Are there any examples of good incident response communications?

A reader asks: Are there any examples of good security incident communications?

Keep Calm and Plan On: Expert Advice on Incident Response Communications

Keep Calm and Plan On: Expert Advice on Incident Response Communications

In this Q&A with Brooke Pearson, we discuss the relationship between internal and external communications as part of a comprehensive incident response program. Brooke is the former head of security awareness at Uber and a Discernible advisory board member.

Turning Incident Response Communications into a Sustainable Security Communications Program

Incident Response

Turning Incident Response Communications into a Sustainable Security Communications Program

The best incident response communications are built on a foundation of strong, ongoing security communications. Here are a few thoughts on how to do that.

Communication Measurement and AI

Incident Response

Communication Measurement and AI

AI makes outcomes-based measurement even more practical. Imagine tracking the real impact of specific content, language, and timing in incident response communications — not just counting outputs, but understanding what actually moved stakeholders. That capability is closer than most teams realize.

CUSTOMER CASE STUDY: Response Planning

CUSTOMER CASE STUDY: Response Planning

The hallmark of Discernible’s approach is that incident response plans are designed to address a variety of security-related incidents regardless of severity or impact.

Scrub these Phrases from Your Data Breach Statements

Incident Response

Scrub these Phrases from Your Data Breach Statements

Speed and accuracy are table stakes for incident response, but three common elements in public statements quietly undermine both — and most organizations don't catch them until the credibility damage is done.

Third Party Security Incident Response: Communicating Even When You’re Not Exposed

Incident Response

Third Party Security Incident Response: Communicating Even When You’re Not Exposed

Why you should communicate with stakeholders about 3rd party security incidents even if you’re not exposed.

Risk Communications: An Introduction

Incident Response

Risk Communications: An Introduction

Security is about more than managing risk. It's also about helping non-experts make decisions with it. That's risk communication — and whether you've studied it or not, you're already doing it. The question is whether you're doing it well.

Preparing for Task Loading During Incident Response

Incident Response

Preparing for Task Loading During Incident Response

Proactively planning for task loading in our incident response gives us more cognitive capacity to take in and make sense of more elements of the situation.

Rescue Diving and the Psychology of Security & Privacy Incidents

Incident Response

Rescue Diving and the Psychology of Security & Privacy Incidents

Like rescue diving, most security and privacy incidents stem from poor judgment, cutting corners, insufficient prep, and panic. Teams can prevent the majority of incidents by proactively assessing situations with communications professionals before they snowball.

What is a Security or Privacy Incident? Hiccups, F*ck Ups, and Give Ups

Incident Response

What is a Security or Privacy Incident? Hiccups, F*ck Ups, and Give Ups

Most orgs only disclose what's legally required, ignoring everyday hiccups, avoidable mistakes, and routine apathy that cause more long-term damage than major breaches. Proactive comms across low-risk, high-frequency incidents builds muscle memory before real crises hit.

Communication Gaps in Security and Privacy

Incident Response

Communication Gaps in Security and Privacy

Security and privacy teams hit avoidable crises when they only call communications pros after incidents strike. Treat communication strategy like compound interest -- invest early in relationship-building, incident prep, and resilience before you need crisis management.