Security Incident Response

Equal Opportunity Statement

SmartThink LLC maintains a work and educational environment free from discrimination, one where employees and students are treated with dignity and respect. All employees share in the responsibility for fulfilling our commitment to equal employment opportunity. SmartThink LLC does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We adhere to these principles in all aspects of employment, recruitment, hiring, training, courses, compensation, promotion, benefits, online interactions, and discipline. In addition, this policy extends in adherence and compliance to our visitors and students.

Our Services

Risk Assessment

Application Security

Network Security

Security Assessment & Authorization

Sarbanes-Oxley (SOX) Compliance

Third Party Assessment

Penetration Testing

SmartThink™ LLC specialises in IT governance, risk management and compliance solutions, with a special focus on cyber resilience, data protection, the GDPR, the Payment Card Industry Data Security Standard (PCI DSS), ISO 27001 and cyber security.

Incident response is a plan that evolves over time to keep your organization best prepared against likely threats.

Incident response is a plan that evolves over time to keep your organization best prepared against likely threats. With punitive measures introduced by the GDPR (General Data Protection Regulation) and the NIS Regulations (The Network and Information Systems Regulations 2018), how an organisation responds to a cyber incident can often spell the difference between failure and success. The speed at which you identify and mitigate such incidents makes a significant difference in controlling your risks, cost and exposure. Effective CIR management can reduce the risk of future incidents occurring, help you detect incidents at an earlier stage and develop a robust defence against attacks to potentially save your organisation millions.

Frameworks that outline and require incident response measures

Incident response planning is mandated as part of all major cyber security regimes either directly or indirectly. The following standards require incident response measures:

ISO 27001, the international standard for an ISMS (information security management system)
ISO 22301, the international standard for a BCMS (business continuity management system)
PCI DSS (Payment Card Industry Data Security Standard)

US government departments also have a responsibility to report cyber incidents under the terms laid out in the security policy framework issued by the Cabinet Office, effectively mandating a CIR for such organisations as well.