Follow Patrick Linkedin Twitter Facebook
Email Patrick Email
Legal Issues
Nov 1, 2015

Guidance For Companies Victimized By Cybercrime

Sponsored Content provided by Patrick Mincey - Criminal Defense Attorney, Cranfill Sumner & Hartzog LLP

In October, the Ponemon Institute estimated the average annual cost of cybercrime for large U.S. companies to be $15.4 million. That figure is up 19 percent from last year and up 82 percent from the institute’s first study six years ago. The study examined the total cost of responding to cybercrime incidents, including detection, recovery, investigation and incident-response management. Researchers also examined expenses after events designed to prevent additional costs stemming from the potential loss of business or customers, such as those seen in widely reported breaches at Target, Home Depot and Sony Pictures.
 
Earlier this year, the Department of Justice Computer Crime & Intellectual Property Section (CCIPS) Cybersecurity Unit issued guidance on best practices for responding to data breaches when companies find themselves victims to these cybercrimes. The document, assembled with the insight of federal prosecutors and investigators, as well as with input from private organizations which have experienced and managed cyber threats and cybercrimes, offers valuable information for companies to consider in crafting their data protection policies.
 
The DOJ’s “best practice” guidance is divided into four parts:

  1. Steps to Take Before a Cyber Intrusion or Attack Occurs;
     
  2. Responding to a Computer Intrusion: Executing Your Incident Response Plan;
     
  3. What Not to Do Following a Cyber Incident; and
     
  4. After a Computer Incident.
The recommendations include conducting risk assessments to identify and prioritize critical assets, data and services. Organizations should develop response plans with specific, concrete procedures to follow in the event of a cyber-attack. Organizations should test the plan with exercises and update it to reflect changes in personnel, as well as maintain and upgrade necessary technology to respond.
 
The Department of Justice (DOJ) recommends organizations engage counsel familiar with legal issues associated with cyber incidents, including outside counsel who specialize in data breach-related legal services. As the DOJ notes, having outside counsel in place before an information security incident can speed an organization’s response and ensure it complies with the organization’s legal obligations.
 
For a full analysis and recommendations for steps to be taken during an attack, the DOJ’s guide is available here.
 
Patrick Mincey is a trial lawyer in Wilmington, where he founded the Criminal Defense Group at Cranfill Sumner & Hartzog LLP. His criminal practice ranges from representing individuals and corporate clients who are targets, subjects or witnesses in federal and state white collar proceedings to “blue collar” defendants charged with murder, drug conspiracies and assaults. To contact Patrick Mincey, call (910) 777-6017 or email him at [email protected].

Wbj insights revised 0510 61715110749
Ico insights

INSIGHTS

SPONSORS' CONTENT
Katrina 262543331

Resolve to Get to Know Good Shepherd in 2025: A Year of Transformative Change

Katrina Knight - Good Shepherd Center
Headshotrosaliecalarco 1182131047

Beware of Online Holiday Shopping Scams

Cfss headshots parker robert webversion 21422121214

Duke Energy Will Pay You Up to $9,000 to Go Solar with a Battery

Robert Parker - Cape Fear Solar Systems

Trending News

Local Medical School Campus Set To Welcome Largest Ever Doctors-in-training Group

Cece Nunn - Feb 17, 2025

In The Current Issue

Small Business Spotlight: Bookstore Fans Romantasy Flame

"I think people want something that is far from reality to escape to, a story they can be fully immersed in, fall in love with characters, c...


Pirate-inspired Bar Perseveres

Early on, thirsty welders, pipefitters and sailors from the nearby North Carolina Shipbuilding Company found cold beer – and wartime solace....


City (and Former City) Properties Performing New Functions

The Thalian Hall space is one of several properties vacated by the city in recent years, following the move to Skyline Center. While the cit...

Book On Business

The 2024 WilmingtonBiz: Book on Business is an annual publication showcasing the Wilmington region as a center of business.

Order Your Copy Today!


Galleries

Videos

2024 Power Breakfast: The Next Season