Incident Reported to Info-Sec Team

Incident Analysis

Incident Categorization & Impact Ransomware Or Cryptolocker ?

MEDIUM LOW

CRITICAL HIGH

IR Procedure

Containment and Recovery

Analysis & Reporting

END

Deloitte

User

SOC

CISO

• CDIO • Head (EA)

Infosec Council and BCDMP Members Discussion & Decision Making Current State • Communicate to Employees & Customers • Invoke Incident Recovery & BCP • Internal Communication Bridge • Cyber Insurance • Forensics • Law Enforcement • CERT-In, NCIIPC and CEA

Deloitte Wipro TCS Crowdstrike Zscaler

HR

Legal & Compliance

Risk Team

Corp Comm. Team

Procurement Team

MD

Incident Recovery & BCP

Infosec Council Members, CEO & MD, President, CDIO, CISO & CRO

Forensics and Third-Party Investigations

Root Cause Analysis

Cyber Insurance

Law Enforcement

Lessons Learned

Board Communication

User

SOC