To address this, the NIST framework calls for plans to detect, respond, and recover. Victims  4  Verizon (2015), “2015 Data Breach Investigations Report,” www.verizonenterprise.com/DBIR/2015  5  See National Institute of Standards and Technology (2014), “Framework for Improving Critical Infrastructure Cybersecurity (PDF).”  6  Verizon (2015), “2015 Data Breach Investigations Report,” www.verizonenterprise.com/DBIR/2015.
4  BIS central bankers’ speeches  are often not aware that they’ve been breached. Did you know that last year the median amount of time it took to discover a breach was about 200 days? 7 Plans need to include methods to detect attacks. You also need to have a response plan.