CSC Incident Response Offering Now Available to Commercial Clients Worldwide
News Release -- February 25, 2014
FALLS CHURCH, Va., Feb. 25, 2014—CSC introduced today an incident response service offering designed to provide commercial clients with around-the-clock access to trained professionals during a cybersecurity incident. Available to public sector clients for the past two decades, this comprehensive incident and breach management commercial offering leverages all of CSC's technical and strategic cybersecurity capabilities delivered through a cost-effective retained pricing model that lowers the financial and technical risks of future incidents.
Commercial organizations remain ill-equipped and unprepared for cybersecurity incidents, as illustrated by a recent Ponemon Institute study titled "The Post-Breach Boom." According to the study, only 41 percent of U.S. organizations said that they had the tools, personnel and funding to prevent breaches and only 39 percent could minimize damages if breached.
Current PCI security standards as well as HIPAA and other industry compliance rules require that companies implement an incident response plan and be prepared to respond immediately to an incident. In a recent technical analysis report about an attack on a major retailer, the U.S. Secret Service concluded that organizations need to "invest in a dedicated Incident Response Team (IRT) that has the knowledge, training and certification to respond to a breach."
Advance incident response planning and preparation for a cyber attack will mitigate operational, reputational and legal damages, including class action lawsuits that can exceed the initial breach losses. "With increases in advanced persistent threats, including emerging humanmorphic threats, now being used by criminals, companies need to be prepared to respond quickly and effectively," said Samuel Visner, CSC's vice president and general manager for cybersecurity. "While it is not a crime to be hacked, organizations can be found negligent when remiss in their response, and a successful incident response goes a long way toward mitigating losses, regardless of the type of attack."
CSC's next-generation offering provides companies with a highly effective, lower cost alternative to building this capability themselves, which can be expensive or incomplete, or with a patchwork of boutiques. CSC delivers its service both as a retained service, in which companies benefit from advance planning, and as an emergency response for same day access to CSC's full suite of incident response services, including digital forensics; evaluation and reporting; digital investigative services; targeted advanced threat detection sweeps of an environment in search of an active breach; law enforcement and regulatory coordination; legal process coordination; incident notification and coordination; and incident response training, awareness and testing. Once an incident has been resolved, companies can transition to CSC's managed security services.
"Our strong links with global intelligence organizations provide us with insights into potential security incidents and attack trends," added Visner. "In addition, commercial clients will benefit from our broad global client experience, flexibility in handling a wide variety of security incidents and our comprehensive set of supporting next-generation cybersecurity services."
"Incident response is fast becoming a critical component of every security plan. Advance preparation with a partner that has the experience, breadth of services, depth of operations and global footprint are key success factors," noted Christina Richmond, IDC Research's program director for security services. "CSC is one of just a handful of companies with these assets, offering an end-to-end breach management solution. Given today's increasingly complex threat landscape, these types of offerings will soon be an enterprise CISO's must-have."
CSC has teamed with Co3 Systems to host its incident response planning and management platform within CSC's global network of security operations centers and Alvarez & Marsal for its readiness, response and support services to deliver this complete offering to clients.
CSC is a global leader of next-generation information technology (IT) services and solutions. The company's mission is to enable superior returns on clients' technology investments through best-in-class industry solutions, domain expertise and global scale. CSC has approximately 80,000 employees and reported revenue of $13.2 billion for the 12 months ended Dec. 27, 2013.