The impact of an incident on your organisation can greatly depend on several factors:
1. Awareness of the potential issues involved
2. Being prepared for such situations
3. Having definite, structured, procedures in place for handling the incidents that do occur
Firstly ensuring that staff are aware of the types of incidents that can occur, the warning signs and the potential impact on the organisation, customers and themselves, is a vital factor in spotting and preventing embarrassing and damaging incidents. Many security related incidents that appear in the press have revolved around a lack of awareness on behalf of employees. Likewise many frauds, IP theft and industrial espionage have gone unnoticed far longer than they should, due to lack of training and awareness of key personnel.
Secondly many incidents have happened where those responsible have not been identified or prosecuted because of a lack of recoverable evidence and the organisation not being adequately prepared for such an event. Lack of risk analysis, suitable controls, logging of events, effective backup and retention polices and clear identification of the "crown jewels", in terms of intellectual property and confidential information, can have dire consequences for any organisation.
Thirdly without clearly defined procedures in place it is not surprising that staff do not know what to do when a serious incident does occur. Will they even bother to report anything suspicious if they do not know who to report it to and what process should be followed to investigate the issue? A well drafted and publicised incident management process can ensure everybody involved know what to do and what part they play in the investigation. Typically a team comprising representatives from relevant areas of the business, e.g. HR, IT, Legal, Finance and Facilities, plus external specialists, will be required to deal with the more complex issues and it is vital that everyone knows what their responsibilities are.
What incident support can LGC offer?
LGC can provide assistance with all stages of incident management, from helping you to draft and implement effective incident management procedures, to training your staff and assisting in the investigation of incidents that do occur. Our highly experienced specialists can help you to uncover the precise circumstances and cause of incidents, helping you to prevent further occurrences by providing advice on preventative measures. Whatever the cause and wherever potential evidence may reside, LGC can provide the answers.