Cyber attack contingency plans should be put on paper, firms told

[highplainsdem]

Source: BBC

-snip-

The government has written to chief executives across the country strongly recommending that they should have physical copies of their plans at the ready as a precaution.

-snip-

Firms are being urged to look beyond cyber-security controls toward a strategy known as "resilience engineering", which focuses on building systems that can anticipate, absorb, recover, and adapt, in the event of an attack.

Plans should be stored in paper form or offline, the agency suggests, and include information about how teams will communicate without work email and other analogue work arounds.

-snip-

"The call for pen and paper might sound old-fashioned, but it's practical," said Graeme Stewart, head of public sector at cyber-security firm Check Point, noting digital systems can be rendered "useless" once targeted by hackers.

-snip-

Read more: https://www.bbc.com/news/articles/ced61xv967lo

---

My thanks to Prairie_Seagull for mentioning this article in another thread - https://www.democraticunderground.com/100220718274#post9 .

[questionseverything]

1. Digital systems can be rendered useless once targeted by hackers

That quote comes from the head of a cybersecurity firm….

Which is why we need hand marked, hand counted paper ballots, counted by people in full public view

[Norrrm]

2. The internet is a poor/unreliable historical document.

The internet is a poor/unreliable historical document. I have seen online newspaper articles that copied the print edition. Then a few days later, it said something different. That was not even hacked. it was done by the newspaper itself...
Hacked could do even worse.

[DBoon]

3. putting your resilience plan on a computer than can be compromised

is just handing an attacker a roadmap to your systems

[OC375]

4. Good Advice

All those emails and PDF's with notes from support on how you fixed something 3 years ago likely won't be available in Outlook. Sharepoint outage may render your DR knowledge base or contact list dead in the water. You may not have network connectivity to connect to your corporate 3rd party password manager or SSO to authenticate to it, but still might have stuff to fix while waiting for it to come up. If DNS is gone do you know key IP addresses or have backup /etc/hosts files? Paper and flash drives are nice for that stuff.