Responding to a security incident is difficult enough in theory, but in practice, it’s a whole new world for many organizations.  And an organization’s finance function is often at the core of incident response:  assessing financial impact and risk; ensuring that essential payments are made; participating on the incident response team; and managing insurance relationships. 

This presentation looks behind the incident response curtain to explore key issues of which financial leaders should be aware, as they help their organizations plan and prepare for cyber risk.  We will look at issues surrounding support vendors, ransomware gangs, liaising with law enforcement, leveraging insurance coverage, and litigation risk.  Participants will learn how to spot key financial and risk issues arising during the incident response process, and gain key insights to help their organizations respond in a risk-informed manner to the next security incident.