Organizations Lack Incident Response Plans, But Answers Are on the Way

The report warns that ransomware attacks and large-scale data breaches are rising while many organizations lack, fail to test, or do not update effective incident response (IR) plans; it cites CISA guidance and expert commentary and highlights the BlackCat/ALPHV attack on Change Healthcare — a breach impacting roughly 190 million people — as a catalyst for organizations to improve IR preparedness and communications.