If you are a business owner with limited knowledge of how to deal with cybersecurity risks, it makes sense to seek expert advice, When interviewing experts it is important to ask the right questions. Jennifer Bell list four essential questions in a post on the Cyber Security Intelligence website:
- What can I do to prevent cyber attacks? The expert should be able to evaluate current security and recommend improvements.
- How often do you test your incident response plan? Specifically, how do they inform customers of a breach; when they call law enforcement; how they stop or limit damage; how often they update software.
- How do you handle cyber risks from vendors and third parties? The expert should only work with secure entities. Know what kind of information and access they will have.
- How protected are you? Experts should be using the services they recommend and sell.
It's best to interview several experts to find the one that's right for you.