Digital Forensics and Incident Response - Second Edition

External communications

Incidents may have a downstream impact on other external entities outside the organization that is suffering the incident. Some of these external entities may include suppliers, customers, transaction processing facilities, or service providers. If any of these organizations have a direct link—such as a virtual private network (VPN)—to the impacted organization, external partners need to be informed sooner rather than later. This is to limit any possibility that an attacker has leveraged this connection to compromise other organizations.

A significant area of concern when addressing incident management and external communications for managed service providers (MSPs) is the trend of attackers targeting MSPs first, with ...