3
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 28 May 2025
3 points (100.0% liked)
Cybersecurity
2 readers
9 users here now
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Rules
Community Rules
- Be kind
- Limit promotional activities
- Non-cybersecurity posts should be redirected to other communities within infosec.pub.
founded 2 years ago
MODERATORS
@jaark@infosec.exchange
In the report, it says that Woldbye expressed "his deep regret at not being contactable during the night of the incident."
Well, he's learnt the lesson now I guess.
Put the crisis plan together - and then make sure you've considered the possible ways it could go wrong. Prevent what's possible to prevent, and think of ways to handle the "what ifs" which might arise in those early hours of a serious incident.
@gcluley@mastodon.green I would say that the chief being asleep should (and is in this case) be just a PR 'problem'. It's fodder for overexcited newspaper headlines. Operationally it didn't affect the response plan.
DR plans must not assume that an individual can be contactable and there is no tech or process that can guarantee that a person is contactable. Many senior positions would have a deputy with the authority to act if the primary is unavailable.