Incident Response Quotes

You can't defend. You can't prevent. The only thing you can do is detect and respond.

When people conceptualize a cyber-attack, they do tend to think about parts of the critical infrastructure like power plants, water supplies, and similar sort of heavy infrastructure, critical infrastructure areas. And they could be hit, as long as they're network connected, as long as they have some kind of systems that interact with them that could be manipulated from internet connection.

There are major funding gaps for security research generally, particularly when it comes to defensive security practices and tools that will contribute to the protection and defense of the Internet.

No, but you've got to be here in case something does happen.

How fast a company can respond in an emergency is a measure of its corporate reflexes.

A young man fills out an application for a job and does well until he gets to the last question, "Who Should we notify in case of an accident?" He mulls it over and then writes, "Anybody in sight!"

I'm supporting anything that we can do to find out how this stuff is happening.

There is no secure data center in the world; they have all been broken into. We can help you prepare for it and minimize the damage when it does occur.

We contacted the FBI months ago, when the DNC issue came about. They've reviewed all of our systems. We have hacking detection systems in place.

We will stop 99 per cent of the attacks. But one per cent of attacks might get through and that is what I am saying.

I think the president-elect [Donald trump] also supports anything we can do to put an end to these sorts of incidents from taking place in our country.

Incidents should not govern policy; but, policy incidents.

We in the FBI have created a malware repository and analysis tool known as the Binary Analysis Characterization and Storage System, or BACSS, which provides near real-time investigative information. BACSS helps us link malware in different jurisdictions and paint a picture of cyber threats worldwide.

International incidents must not be allowed to shape foreign policy, foreign policy must shape the incidents.

I generally use 'threat intelligence' when I'm talking about a product packaged and sold by a dedicated commercial entity and 'information sharing' as something that happens between security teams at trusted parties without renumeration.

Cruise passengers can be blinded to the very real perils of the sea by ship operators unwilling to interrupt the party for security warnings. And after an incident occurs, a thorough investigation can be profoundly difficult when the crime scene literally floats away, on schedule, to its next port of call.

FusionX's elite team of cyber security experts works at the C-Suite level to help clients test security and see their vulnerabilities through actual replica attacks. This acquisition brings to Accenture the critical ability to help our clients assess and respond to sophisticated cyber-attacks.

For most companies, they don't want to ever talk about security unless it's an absolute emergency and they've had a breach. And I think that's a mistake.

Security today is important, but 90 percent of security involves other co functions of government.

A company's ability to respond to an unplanned event, good or bad is a prime indicator of its ability to compete.

When Target gets hacked, I don't hear people saying, 'Hey, was it Kohl's? Was it Wal-Mart?' It doesn't matter. There was a hack; you deal with it.

Becoming an effective security professional requires more than knowing how to deploy and configure technology. It requires combining security theory with practical, hands-on experience.

Think about it: if you were running a multi-million dollar company, and your database of customer information was stolen, would you want to tell your clients? No. Most companies did not until the laws required them to. It's in the best interest of organisations - when they're attacked and information is stolen - to tell nobody.

You have to know how to use the accident, how to recognise it, how to control it, and ways to eliminate it so that the whole surface looks felt and born all at once.

Any security issues, you have to be very hands on to really understand what's the exact problem, and then take quick action.