Incident response plans must be tested

A cyber incident response plan isn’t worth the paper it’s written on if it hasn’t been tested, a Canadian lawyer has told a privacy conference. “The significance of [having] a response plan clearly can’t be overstated,” Adam Kardash, chair of the privacy and data management practice at Toronto law firm of Osler, Hoskin & Harcourt, told the Canadian Institute’s annual Privacy and Data Security Compliance Forum in Toronto on Tuesday.

Source: Incident response plans must be tested, privacy conference warned | IT World Canada News