Some of the largest point-of-sale data breaches, for example, originate outside payment card systems. 6 You should also keep up to date on cyber developments and gather information about threats from information sharing forums, including FS-ISAC, US-CERT, and the FBI’s InfraGard. Regardless of how well we identify and protect, we also need to plan for a potential attack.
To address this, the NIST framework calls for plans to detect, respond, and recover. Victims  4  Verizon (2015), “2015 Data Breach Investigations Report,” www.verizonenterprise.com/DBIR/2015  5  See National Institute of Standards and Technology (2014), “Framework for Improving Critical Infrastructure Cybersecurity (PDF).”  6  Verizon (2015), “2015 Data Breach Investigations Report,” www.verizonenterprise.com/DBIR/2015.