--- title: 10 Things I Know About...Setting up a Crisis Response Plan description: 10 Things I Know About...Setting up a Crisis Response Plan --- [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/head-logo-2.svg "TowerWall")](https://towerwall.com/) [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/towerwall-logo-white-test.svg "TowerWall")](https://towerwall.com/) - [Our Partners](https://towerwall.com/how-we-protect-you/our-technology-partners/) - Our Solutions - - Our Cybersecurity Solutions - We operationalize infosec, building security solutions that safeguard your most critical assets. - - [Solutions Overview](https://towerwall.com/cybersecurity-solutions/) - [Risk Assessments & Security Reviews](https://towerwall.com/cybersecurity-solutions/risk-assessments-security-reviews/) - [Program & Policy Development](https://towerwall.com/cybersecurity-solutions/program-policy-development/) - [Incident Response & Remediation](https://towerwall.com/cybersecurity-solutions/incident-response-remediation/) - [Managed Detection & Response](https://towerwall.com/cybersecurity-solutions/managed-detection-response/) - - [Compliance & Privacy](https://towerwall.com/cybersecurity-solutions/compliance-privacy/) - [Comprehensive Security Training](https://towerwall.com/cybersecurity-solutions/comprehensive-security-training/) - [Vulnerability Protection](https://towerwall.com/cybersecurity-solutions/vulnerability-protection/) - [Penetration Testing](https://towerwall.com/cybersecurity-solutions/penetration-testing/) - Virtual Security Officers - - Virtual Security Officer - Leverage the experience and security acumen of Towerwall’s on-demand security experts. - - [Virtual Chief Information Security Officer (VCISO)](https://towerwall.com/virtual-security-officers/virtual-chief-information-security-officer-vciso/) - [Virtual Data Protection Officer (vDPO)](https://towerwall.com/virtual-security-officers/virtual-data-protection-officer-vdpo/) - [Virtual Chief Privacy Officer (vCPO)](https://towerwall.com/virtual-security-officers/virtual-chief-privacy-officer-vcpo/) - We Advise - - We Advise - One-size security solutions only lead to failure. - Industries - [Higher Education](https://towerwall.com/industries/higher-education/) - [Financial Services & Banking](https://towerwall.com/industries/financial-services-banking/) - [Healthcare](https://towerwall.com/industries/healthcare/) - [BioPharma & Bio-Therapeutics](https://towerwall.com/industries/biopharma-bio-therapeutics/) - [Retail](https://towerwall.com/industries/retail/) - [Government](https://towerwall.com/industries/government/) - [Catholic Diocese](https://towerwall.com/industries/catholic-diocese-cybersecurity/) - [Cannabis](https://towerwall.com/industries/cannabis/) - [Small Business](https://towerwall.com/industries/small-business/) - [Enterprise](https://towerwall.com/industries/enterprise/) - Trends & Threats - [Remote Workforce](https://towerwall.com/trends-threats/remote-workforce/) - [Vendor Questionnaire](https://towerwall.com/trends-threats/vendor-questionnaire/) - [HIPAA](https://towerwall.com/trends-threats/hipaa/) - [Ransomware](https://towerwall.com/trends-threats/ransomware/) - [GDPR](https://towerwall.com/trends-threats/gdpr/) - [Cloud Security](https://towerwall.com/trends-threats/cloud-security/) - [Phishing](https://towerwall.com/trends-threats/phishing/) - [Cybersecurity Insurance](https://towerwall.com/trends-threats/cybersecurity-insurance/) - [Resources](https://towerwall.com/resources/) - - Resources - Our latest insights, events, and tools to keep you safe. - - [Insights](https://towerwall.com/resources/?resources_category=MTU%3D&focusarea=0&industries=0&search=) - [Webinars](https://towerwall.com/resources/?resources_category=MTg%3D&focusarea=0&industries=0&search=) - [Whitepapers](https://towerwall.com/resources/?resources_category=MTY%3D&focusarea=0&industries=0&search=) - [View All](https://towerwall.com/resources/) - [Company](https://towerwall.com/company/) - - Our Company - We are the industry’s leading cybersecurity preparedness partner. - - [Who We Are](https://towerwall.com/company/) - [Our Team](https://towerwall.com/company/our-team/) - [Our Approach](https://towerwall.com/our-approach/) - [Our Values](https://towerwall.com/company/our-values/) - - [Awards & Recognition](https://towerwall.com/company/awards-recognition/) - [Certifications & Affiliations](https://towerwall.com/company/certifications-affiliations/) - [Community Involvement](https://towerwall.com/company/community-involvement/) - [Careers](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) Topics Worcester Business Journal, Phishing, Crisis Response Plan, malware, ransomware, 10 Things I Know, Compliance, cannabis, Enterprise # 10 Things I Know About...Setting up a Crisis Response Plan [By Michelle Drolet](https://blog.towerwall.com/author/towerwall2020) [Read More](https://blog.towerwall.com/author/towerwall2020) 1 Minute Read April 13, 2020 ### 10) Start with a plan. Companies of all shapes and sizes should draft a distinct crisis response plan. Existing disaster recovery plans or business continuity plans might not suffice. ### 9) Lead with leadership. Pick a small team responsible for your plan. Get buy-in from the top, pull in human resources, finance, IT. Develop policies minimizing disruption but ensuring data security is maintained and regulatory requirements are observed. Appoint a virtual CEO in case leadership falls ill. ### 8) Plan for every eventuality. Consider how to keep company functions going. Consider how employees will get paid, where they will work, and how they will complete their tasks. ### 7) Test your plan. No plan is trustworthy unless you test it. Create tabletop exercises and mock incidents to root out and identify problem areas needing patching. ### 6) Communicate. Set up systems to disseminate the latest information like a messaging app/chat room to convey news and a list of contacts. Get the CEO to issue regular status updates, remain transparent, avoid leaving staff in the dark. Pay special attention to young families and those living with seniors. Use social media & your website to keep customers informed. ### 5) Train and assess employees. Allow employees to train for substitute roles should the worst happen. Providing step-by-step instructions they can refer to should unexpected situations rise up should help reduce stress. Try to foster a sense of solidarity and community. ### 4) Work remotely. Employees working from home need to be set up with virtual private networks, SSL and dual-factor authentication. Test your endpoint security. Plan for increased bandwidth demand and beware of staff using personal devices to log-in into the company. ### 3) Test for stress. Do you have enough capacity? Stress-test your network applications for load. Identify which critical applications (hardware & servers) will need additional expansion for handling sudden surges in traffic. ### 2) Continuous training. Conduct regular cybersecurity user awareness and training to ensure staff can identify and avoid phishing scams, especially during times of crisis when bogus emails, social media memes and cybercrime proliferates. Beware of disinformation campaigns and doctored, so-called deepfake, videos. ### 1) Do fun things! Working remotely from home can be lonely. Pull in human resources to devise fun ways to keep teams socially engaged, such as staging photo contests for best home office, or running a daily lunch hour via online conference. [This article was originally posted in Worcester Business Journal >](https://www.wbjournal.com/article/10-things-i-know-aboutsetting-up-a-crisis-response-plan) #### 10 Things I Know About...Setting up a Crisis Response Plan Back to Top ## Related Insights ### ["Bridging the Cybersecurity Skills Gap: 3 Big Steps" Featured in InformationWeek Dark Reading](https://blog.towerwall.com/towerwalls-latest-article-bridging-the-cybersecurity-skills-gap-3-big-steps-featured-in-informationweek-dark-reading) Worcester Business Journal, Phishing, Crisis Response Plan, malware, ransomware, 10 Things I Know, Compliance, cannabis, Enterprise ### [Towerwall's Latest Article "Secure Your Future with a Virtual CISO" Featured in Infosecurity Magazine](https://blog.towerwall.com/michelle-drolet-published-infosecurity-magazine-secure-future-virtual-ciso) Worcester Business Journal, Phishing, Crisis Response Plan, malware, ransomware, 10 Things I Know, Compliance, cannabis, Enterprise [View All Insights](https://blog.towerwall.com) × ## Talk with us now about: #### Your security needs. - ![Phone](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/phone-icon.svg "Phone") [Call 774.204.0700](tel:774.204.0700) - ![Mail](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/mail-icon.svg "Mail") [Email Us](mailto:info@towerwall.com) ### The front line of cybersecurity.™ For over 23 years, Towerwall, a woman-owned business, has helped scores of companies safeguard their data and leverage their investment in IT with advanced information security technology solutions and services. Our experience in all facets of information security coupled with serving in the CIO/CISO/ISO roles provides a unique first-hand understanding of the security challenges organizations face daily. ### Connect - - - - - [Career Opportunities](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) © Towerwall, Inc. and its licensees. All rights reserved [Privacy Policy](http://towerwall.com/privacy-policy/) Sitemap [Created by Howbridge](https://meethowbridge.com/) [![Towerwall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/footer-logo.svg "Towerwall")](https://towerwall.com/)