YOU'VE BEEN HACKED. NOW WHAT It is not a matter of ‘if’, but ‘when’ an organisation will be attacked. Some signs that you have been attacked: When you click on an Internet link or download an online file, and you cannot access your usual files, applications or services. If you are locked out of your online accounts or receive messages that your password has been changed when you have not changed it. When your organisation’s system slows to a crawl when responding to legitimate users, it may be suffering from an attack, where cyber-attackers have swamped the targeted system with so much information that it grinds to a halt. So how? Find out the reason for the attack to better understand the breach. This will help with recovery. Take back your account. For example, if your Internet banking account has been illegally accessed, report it immediately to the bank. Immediately change the password. Perform a security check on all your affected systems accounts. Ensure that all 6 Essentials (listed on pages 4 — 15) have been thoroughly implemented. Consider stepping up your security posture using the additional Measures (see pages 16 & 17). Call your organisation’s incident response team immediately when you discover the cyber-attack. The team will help the organisation fiat situation. Remember to > report the incident to the Sir ore Cc the