EPSD | Incident Handling

Filter By:

16 May 25

Brian Armstrong, the CEO of Coinbase, speaks at a conference. On May 15, 2025, Armstrong released a video in which he described how an incident happened, what Coinbase was doing about it, and that they were making victims whole, while also announcing a $20 million reward for information leading to the arrest and conviction of the perpetrators.

16 May 25

A CEO's Transparent Incident Response Communication

by Nick Selby

On May 11, Coinbase suffered a social engineering attack targeting their outsourced customer support department. Their SEC Material Cybersecurity Incident disclosure on May 15 revealed attackers obtained enough personal information to launch sucessful fake customer service attacks against Coinbase customers.

12 May 25

Is Your Incident Readiness Plan Ready?

by Nick Selby

If your business relies on technology, security incidents are inevitable. That’s why a comprehensive, up-to-date incident readiness plan is essential. But incident response readiness isn’t something you can buy—it’s something you need to build, refine, and integrate into your organization’s culture.

11 May 25

Five Security Incident Readiness Steps to Take Now.

by Nick Selby

Security incidents are inevitable if your organization relies on technology, people, and data. The key to minimizing their impact is having an up-to-date, well-practiced incident response plan. Here are five essential steps to ensure your organization is prepared when—not if—a security incident occurs.

10 May 25

business people assess graphs, illustrating the concept of measureing incident response

10 May 25

Measuring What Matters: Track Incident Response Performance and Prove ROI

by Nick Selby

Many organizations invest heavily in incident response (IR) capabilities, yet struggle to measure their effectiveness and return on investment (ROI). Without clear performance metrics, leadership lacks visibility into whether incident handling processes are improving over time or if teams are just repeating the same mistakes.

9 May 25

From Firefighting to Framework: Turning Incident Handling into a Strategic Advantage

by Nick Selby

If your business relies on technology, security incidents are inevitable. And all businesses rely on technology. That’s why a comprehensive, up-to-date incident readiness plan is essential. But incident response readiness isn’t something you can buy—it’s something you need to build, refine, and integrate into your organization’s culture.

6 May 25

the word security appears on a computer screen

6 May 25

Not Semantics: Why It Matters That the CrowdStrike Outage Was a Security Incident

by Nick Selby

When a faulty update to CrowdStrike’s Falcon endpoint detection and response product rendered Windows systems worldwide inoperable, it created a headline-grabbing IT outage. Airlines, hospitals, emergency services, and businesses were all affected—unable to access critical systems without complex, manual recovery efforts.

5 May 25

a business woman holds her head in anguish as colleagues argue in the foreground, illustrating the true cost of a cybersecurity incident

5 May 25

The True Cost of Cybersecurity Incidents

by Nick Selby

Regardless of how it happens, when your customers can’t access your service, you can’t take payments, or you can’t pay suppliers, your business stops. Full stop.

3 May 25

An older businessman shakes the hand of a younger businesswoman to illustrate the concept of succession planning

3 May 25

Succession Planning: A Surprisingly Common Business Risk

by Nick Selby

Fast-growing companies, particularly those in technology and high-stakes industries, often prioritize immediate operational needs over long-term planning. One critical area that frequently gets overlooked is succession planning—a business continuity essential that can create serious vulnerabilities if not properly addressed.

29 Apr 25

Photograph of endless binders of paper reports

29 Apr 25

The Post-Mortem Dilemma: Why Companies Struggle to Learn from Incidents

by Nick Selby

Security incidents should be a catalyst for improvement, but too often, companies fail to extract meaningful lessons from them. Post-incident reviews are either rushed, incomplete, or focused on blame, leading to missed opportunities for resilience and long-term security improvements.

Insights and updatesfrom across the team.

Filter By:

Insights and updates
from across the team.