Indonesian Financial Services Authority
Use Machine Learning (ML) and Artificial Intelligence (AI) technologies to enhance threat detection capabilities. These technologies can analyze big amounts of data and identify subtle patterns that might indicate sophisticated cyber-attacks. 6.
5.3. Containment
At this phase, the incident response team focuses on stopping incident escalation and restricting further damage for stability of the IT environment. Key steps include:
1.
Isolate affected systems by disconnecting network connections to prevent lateral movement by hackers.
2.
Restrict the movement of potentially malicious traffic.
3.
Revoke access by deactivating compromised user accounts or infected access rights to restrict the hacker movement.
4.
Service termination or certain process corresponding to the incident.
5.
Notify internal incident response team and stakeholders about the data breach to ensure a coordinated containment effort.
57
Made with FlippingBook. PDF to flipbook with ease