The first thing an IT security executive should do after the corporate network has been breached is fall back on the incident response plan that was put in place well before attackers got through the carefully constructed defenses. There are seven key things breach-repair leaders should do, according to Wade Woolwine, the manager of strategic services for Rapid7, who outlined the steps last week. Its all about recovering the business back to normal operations, Woolwine says. You will make decisions as evidence materializes.”]
Source: https://www.csoonline.com/article/2938659/7-things-to-do-when-your-business-is-hacked.html