A precursor is a sign or signal that an event may occur in the future. An indicator is a sign or signal that an incident is occurring or has already occurred. In the healthcare industry, there are some challenges that comes from incident detection precursors and indicators. It’s rare that a precursor will tell you if something is actually going to happen. You can increase your protection to critical systems just in case something were to happen. You can also pay closer attention to indicators and warning systems. Adding mobile devices to a network can create challenges with indicators. Not only do you have to handle incidents or events with an office network, you also have to deal with the mobile devices that are put into the hands of people who might not understand threats. It’s important to find out if an incident actually happened. During the detection phase, you should look for the indicators of compromise. These are signs that tell you an incident has occurred. You can also check information that is publicly available, such as updated vulnerabilities.
Incident Response: How to Make Cyber Incidents Less Chaotic. 2021. https://www.g2.com/articles/incident-response
