Cyber first aid: proactive risk management and decision-making

摘要

Public and private organizations need a robust approach to prepare, respond, and recover from cyber-attacks. This perspective article will refer to such an approach as Cyber First AID-adaptable, integrated, and deliberate. Adaptable describes that one size does not fit all; Integrated means the effort is throughout the organization; and Deliberate describes plans that are reviewed periodically and practiced, in which all members of the organization know their respective roles and responsibilities. The article outlines a decision-making process for how to minimize the impacts of cyber threats, maintain stakeholder and customer confidence, and help organizations to adaptively manage and respond to cyber threats in rapidly changing cyber environments.