When Hackers Strike What Do I Do?

The video discusses the importance of having an incident response plan in place before a cyber attack occurs. It emphasizes the role of legal counsel and investigative teams in managing breaches, the considerations for involving law enforcement, and the complexities of insurance and regulatory compliance. The video also covers best practices for data management and retention, and concludes with a Q&A session addressing specific cybersecurity challenges.

What is the primary reason for having an incident response plan in place before a cyber attack?

• To ensure quick recovery of lost data

• To save money on cybersecurity insurance

• To avoid making decisions under pressure during an attack

• To comply with federal regulations

What should companies do to prepare for potential data breaches?

• Establish a relationship with law enforcement

• Develop a timeline for data access

• Collect as much data as possible

• Focus solely on internal security measures

Why is it important for an attorney to manage the data breach process?

• They have better technical skills than IT specialists

• They can negotiate with hackers

• They can provide free legal services

• They can ensure attorney-client privilege is maintained

What is a key factor in deciding whether to involve law enforcement in a cyber incident?

• The size of the company

• The type of data compromised

• The potential for financial loss

• The availability of cybersecurity insurance

What is a potential benefit of involving the FBI in a financial cybercrime?

• They can prevent future attacks

• They can offer legal advice

• They can quickly recover lost funds

• They can provide free cybersecurity tools

What is a challenge faced by small businesses in managing cybersecurity?

• High cost of cybersecurity insurance

• Lack of interest from law enforcement

• Difficulty in maintaining a hardware inventory

• Limited access to cybersecurity talent

What should companies understand about their cyber insurance policies?

• The cost of the premium

• The policy exclusions and coverage limits

• The reputation of the insurance company

• The number of claims they can file per year

What is a common issue with cyber insurance claims?

• Policies cover only large corporations

• Insurance companies do not cover legal fees

• Policies often exclude physical security breaches

• Claims are always denied

What is the definition of a data breach in California?

• Physical theft of a computer

• Any unauthorized access to a computer system

• Unauthorized access to personally identifiable information

• Loss of any company data

Why is it important to have a data retention and disposition policy?

• To ensure compliance with international laws

• To reduce the risk by eliminating unnecessary data

• To increase storage capacity

• To improve data access speed