Creative Computing Group Interview

Introduction

The interview was conducted with Ken Chilton, the Global Senior IT Manager for Core Laboratories, an international oil and gas service company. With extensive experience in IT management and a specialization in the oil and gas sector, Ken offered insight into his responsibilities and the overall IT infrastructure of Core Laboratories.

Structure of the IT Department

IT Roles: IT at Core Laboratories comprises various functions, and while Ken oversees infrastructure, there are others focused on development and IT security.
Security Team Composition: The dedicated IT security team consists of two core individuals: the IT security director and a security agent, while all staff contribute to IT security protocols.

Approach to IT Security

Role of Employees: Core Laboratories emphasizes that everyone, including end-users, plays a crucial role in maintaining IT security. The culture promotes accountability at all levels of the organization.
Team Size and Global Context: There are about 30 individuals directly involved in IT security internationally, with one specific contact in the UAE.

IT Infrastructure and Connectivity

Physical Devices: The organization utilizes hundreds of firewalls across its 120 offices in 70 countries alongside cloud-based security systems to protect its network.
Network Connectivity: Core Laboratories employs simple internet connections supported by Cisco Meraki software-defined wide area networks (SD-WAN) for streamlined performance across multiple locations.

Security Mechanisms

Layered Security Approach: A multi-layered security strategy includes firewalls, heuristic AI-based agents that monitor for anomalies instead of conventional virus scanners, and device hardening guides.
Patching and Monitoring: Regular system updates and monitoring are imperative to maintain security integrity. Microsoft’s tools manage patching, and constant analyses occur for identifiable risks.
Training Initiatives: Ongoing education about cybersecurity is vital for the workforce, as improper practices can lead to breaches. Training includes phishing awareness, social engineering recognitions, and updates via newsletters.

Incident Management Procedures

Response to Breaches: In case of a security breach, systems suspected of compromise are immediately quarantined, and investigations are undertaken to assess the extent of the incident. User accounts may be disabled while affected users undergo additional training.
Documentation for Breaches: Institutional policies provide detailed frameworks for how an event is categorized and reported, ensuring compliance and communication with relevant executives and legal personnel.

Cybersecurity Costs

Cost of Security Infrastructure: The total expense for maintaining cybersecurity measures and IT infrastructure at Core Laboratories surpasses one million USD annually, specifically allocated for 4,000 endpoints.
Cost vs. Risk: Ken emphasizes understanding the 'cost of doing nothing.' Investing in cybersecurity is less about immediate financial outlays and more about mitigating risks of severe operational disruption.

Tools and Applications Used

Specific Applications: Their IT department utilizes multi-factor authentication tools, specifically RSA servers, for enhanced security during login processes. Security-related software is proprietary and largely undisclosed due to sensitivity.
Server Room Management: Core Laboratories operates multiple server rooms globally, with over 200 servers distributed across their operations, which are monitored and managed by their team.

Cable Infrastructure and Network Breaches

Connection Types: Predominantly, they employ fiber connections, but alternative options like cellular networks and satellites are used where necessary. The means of connection affect the difficulty of breaches; fiber is more vulnerable as it often targets main firewalls.
Physical Security Concerns: Although the organization has protocols that address potential physical breaches, they mainly rely on infrastructure and IT security policies.

Training and Employee Engagement

Emphasis on Education: Regular training updates and newsletters are distributed to raise awareness regarding cybersecurity, especially during periods of increased risk, such as holiday shopping seasons.
Client Awareness: Employee-client relationships define the organization’s proactive approach towards cybersecurity, steering clear of using terminology that might alienate employees.

Final Thoughts and Future Considerations

Challenges Ahead: Ken underscores the importance of adaptation in an era of rapidly evolving technology, including challenges from AI and quantum computing in cybersecurity. The responsibility lies with the next generation to bridge the gaps in knowledge and keep ahead of potential threats.
Ongoing Communication: Ken encourages open communication and education as pivotal strategies for enhancing security in the organization while nurturing a respectful workplace where everyone feels valued and informed.

Introduction

The interview was conducted with Ken Chilton, the Global Senior IT Manager for Core Laboratories, which is a prominent international oil and gas service company. With a significant background in IT management and specific expertise in the oil and gas sector, Ken provided valuable insights into his multifaceted responsibilities and the overarching IT infrastructure that supports Core Laboratories’ global operations.

Structure of the IT Department

The IT department at Core Laboratories comprises various roles and functions, ensuring comprehensive coverage of all aspects necessary for effective IT management. While Ken oversees the infrastructure, there are dedicated teams focused on development, maintenance, and IT security to ensure a robust IT environment.

IT Roles: The variety of functions includes software development, systems engineering, and network administration, all integral to the company’s operations. Ken's leadership in infrastructure management ensures that all physical and virtual resources align with the company’s strategic goals.

Security Team Composition: Within the IT structure, the IT security team is composed of two core individuals: the IT security director and a dedicated security agent. However, security is a collective responsibility at Core Laboratories, with all staff members expected to contribute to the implementation of IT security protocols, thus cultivating a culture of vigilance and accountability.

Approach to IT SecurityIn Core Laboratories, IT security is not solely the responsibility of the IT department; rather, it is a shared commitment across all levels of the organization.

Role of Employees: The company emphasizes that every employee, including end-users, plays a crucial role in preserving IT security. By fostering a sense of ownership and responsibility, Core Laboratories aims to instill best practices in cybersecurity among its workforce.

Team Size and Global Context: Approximately 30 individuals are directly involved in IT security efforts internationally. Notably, there is a designated IT security contact in the UAE, reflecting how security management is adapted to different regional threats and compliance issues.

IT Infrastructure and Connectivity

Core Laboratories employs a sophisticated IT infrastructure to facilitate seamless operation across its diverse global presence.

Physical Devices: The organization leverages hundreds of firewalls strategically placed across its 120 offices located in 70 countries. These firewalls work in conjunction with cloud-based security systems to create a robust network defense against external threats, ensuring the integrity and confidentiality of sensitive data.

Network Connectivity: To support its international operations, Core Laboratories utilizes simple internet connections, augmented by Cisco Meraki's software-defined wide area networks (SD-WAN). This deployment allows for optimized performance and enhanced reliability across multiple geographical locations, ultimately supporting the efficient management of IT resources.

Security Mechanisms

The security strategy at Core Laboratories is characterized by a layered approach, incorporating various technologies and methods to safeguard its assets.

Layered Security Approach: The multi-layered security strategy includes advanced firewalls, heuristic AI-based agents that monitor for anomalies, and device hardening guides that ensure all endpoints are configured securely. This comprehensive approach contrasts with reliance solely on conventional virus scanners, showcasing a forward-thinking attitude towards cybersecurity.

Patching and Monitoring: Regular system updates and vigilant monitoring are paramount to maintaining the organization's security integrity. Microsoft’s tools manage patching processes effectively, while constant analyses are conducted to identify risks and address them proactively.

Training Initiatives: Recognizing that many cybersecurity incidents stem from user errors, ongoing education about cybersecurity is essential for all employees. Training programs are designed to cover various topics, including phishing awareness, social engineering recognition, and routine updates delivered through newsletters, reinforcing vital concepts to mitigate risks.

Incident Management Procedures

Ken outlined the structured processes Core Laboratories follows in the event of a security incident.

Response to Breaches: In the event of a suspected security breach, the protocol calls for an immediate quarantine of compromised systems. This containment step is critical to preventing further damage and aids in the investigation process. Once a breach is identified, a thorough assessment is undertaken to determine the extent of the compromised data or systems. Additionally, user accounts that could have been affected are disabled pending further evaluation and additional training to ensure the user understands the mistake made and how to avoid future incidents.

Documentation for Breaches: Core Laboratories maintains detailed institutional policies that provide frameworks for categorizing and reporting security events. This ensures compliance with regulations and facilitates clear communication with relevant executives, stakeholders, and legal personnel involved in incident management.

Cybersecurity Costs

The financial aspect of maintaining an effective cybersecurity and IT infrastructure is significant.

Cost of Security Infrastructure: Core Laboratories allocates a budget that exceeds one million USD annually for cybersecurity measures and IT infrastructure, specifically focusing on the management and protection of 4,000 endpoints. This investment highlights the company’s commitment to safeguarding its operations and data against evolving cyber threats.

Cost vs. Risk: Ken emphasizes the importance of understanding the 'cost of doing nothing' in terms of cybersecurity. Investing in robust cybersecurity measures is less about immediate financial implications and more about mitigating the risks associated with potential operational disruptions that could result from cyber incidents.

Tools and Applications Used

The IT department at Core Laboratories employs a range of advanced applications and tools to bolster security.

Specific Applications: Among these tools, multi-factor authentication systems, particularly RSA servers, are utilized for enhanced security during login processes. Due to the sensitive nature of their operations, much of their security-related software is proprietary and undisclosed, underscoring the critical importance placed on safeguarding their technological assets.

Server Room Management: Core Laboratories operates multiple server rooms on a global scale, with over 200 servers managed and monitored continuously by their dedicated IT team. This comprehensive management ensures high availability and reliability of services while facilitating rapid responses to any issues that may arise.

Cable Infrastructure and Network Breaches

The organization’s connection types are pivotal to its operational security and functionality.

Connection Types: Core Laboratories predominantly relies on fiber connections to facilitate high-speed data transfers. However, in situations where fiber is not viable, alternative options such as cellular networks and satellite communications are used. The type of connection impacts the potential vulnerabilities, as fiber connections can be more susceptible to targeted attacks that often aim for the main firewalls protecting corporate networks.

Physical Security Concerns: Although the organization has established protocols to address physical breaches, there is a significant reliance on existing infrastructure and IT security policies to deter potential threats. This highlights a need for continuous review and enhancement of physical security measures to complement the existing IT safeguards.

Training and Employee Engagement

Core Laboratories places a strong emphasis on continuous education and employee engagement as essential components of its cybersecurity strategy.

Emphasis on Education: Regular training updates and newsletters are distributed to all employees to raise awareness regarding cybersecurity challenges. This is particularly crucial during higher-risk periods, such as holiday shopping seasons when phishing attacks tend to rise.

Client Awareness: The organization fosters strong employee-client relationships and promotes a proactive approach to cybersecurity. This is achieved by avoiding the use of complex terminologies that may alienate employees and instead emphasizing collaborative education and support.

Final Thoughts and Future Considerations

Ken highlights the challenges ahead for cybersecurity in the face of rapidly evolving technology.

Challenges Ahead: He underscores the importance of adaptation to counter the emerging threats posed by advancements in AI and quantum computing technologies. As these technologies evolve, the responsibility lies with the next generation of IT professionals to bridge knowledge gaps and stay ahead of potential cybersecurity threats.

Ongoing Communication: Ken encourages fostering open lines of communication and prioritizing education as pivotal strategies for enhancing security within the organization. By nurturing a workplace environment where every employee feels valued and informed, Core Laboratories positions itself to navigate the complexities of modern cybersecurity successfully.

Infrastructure Description and IT Security Response

Core Laboratories operates within the oil and gas service industry, featuring an extensive global presence with a sophisticated IT infrastructure spanning 120 offices across 70 countries. The infrastructure is fortified by hundreds of firewalls and over 200 servers that are strategically monitored and managed by a dedicated IT team. This robust setup enables seamless operations while ensuring the confidentiality and integrity of sensitive data essential to the sector's demands.

Ken Chilton, the Global Senior IT Manager, oversees this infrastructure, emphasizing the shared responsibility of IT security among all employees. The collaborative culture instills accountability, aligning with industry standards which advocate for comprehensive security ownership across organizational levels (Whitman & Mattord, 2016).

Security Mechanisms

The security landscape at Core Laboratories is underpinned by a multi-layered security strategy designed to address current and emerging threats in the IT environment. This layered approach includes:

Advanced Firewalls: Positioning numerous firewalls throughout global offices establishes a first line of defense against unauthorized access and attacks (Gibson, 2018).
Heuristic AI-Based Monitoring: Utilizing artificial intelligence for anomaly detection surpasses traditional virus scanning, offering proactive threat detection (SANS Institute, 2020).
Device Hardening Guides: These ensure that endpoints are configured securely, reducing vulnerabilities exposed to potential threats.
Regular System Updates and Active Monitoring: Employing Microsoft's tools for patch management and constant risk assessments aids in maintaining the integrity of the organization's IT framework.
Education and Training Initiatives: Continued employee training programs concerning cybersecurity best practices are integral to mitigating human-factor vulnerabilities, as indicated by various studies linking employee awareness to decreased security risks (KnowBe4, 2019).

Justification of the Approach

This layered security strategy is justified through the acknowledgment of advanced threats facing organizations today, especially within sensitive sectors like oil and gas. The intertwining of technology and cybersecurity has prompted enterprises to adopt comprehensive strategies that encompass not only technical defenses but also organizational practices (Kraemer-Mbula et al., 2019). By harnessing a multi-faceted approach, Core Laboratories not only addresses immediate operational risks but also aligns with broader industry objectives to foster resilience against evolving cyber threats.

Conclusion

In essence, Core Laboratories embodies a proactive and comprehensive approach to IT security, one that recognizes the interconnectedness of technical measures and organizational practices in building a secure infrastructure. This strategy not only enhances their capabilities within the oil and gas sector but also aligns with wider trends in IT security aimed at safeguarding sensitive data against an ever-increasing threat landscape.

Introduction

Structure of the IT Department

IT Roles: The variety of functions includes software development, systems engineering, and network administration, all integral to the company’s operations. Ken's leadership in infrastructure management ensures that all physical and virtual resources align with the company’s strategic goals.
Security Team Composition: Within the IT structure, the IT security team is composed of two core individuals: the IT security director and a dedicated security agent. However, security is a collective responsibility at Core Laboratories, with all staff members expected to contribute to the implementation of IT security protocols, thus cultivating a culture of vigilance and accountability.

Approach to IT Security

In Core Laboratories, IT security is not solely the responsibility of the IT department; rather, it is a shared commitment across all levels of the organization.

Role of Employees: The company emphasizes that every employee, including end-users, plays a crucial role in preserving IT security. By fostering a sense of ownership and responsibility, Core Laboratories aims to instill best practices in cybersecurity among its workforce.
Team Size and Global Context: Approximately 30 individuals are directly involved in IT security efforts internationally. Notably, there is a designated IT security contact in the UAE, reflecting how security management is adapted to different regional threats and compliance issues.

IT Infrastructure and Connectivity

Core Laboratories employs a sophisticated IT infrastructure to facilitate seamless operation across its diverse global presence.

Physical Devices: The organization leverages hundreds of firewalls strategically placed across its 120 offices located in 70 countries. These firewalls work in conjunction with cloud-based security systems to create a robust network defense against external threats, ensuring the integrity and confidentiality of sensitive data.
Network Connectivity: To support its international operations, Core Laboratories utilizes simple internet connections, augmented by Cisco Meraki's software-defined wide area networks (SD-WAN). This deployment allows for optimized performance and enhanced reliability across multiple geographical locations, ultimately supporting the efficient management of IT resources.

Security Mechanisms

The security strategy at Core Laboratories is characterized by a layered approach, incorporating various technologies and methods to safeguard its assets.

Layered Security Approach: The multi-layered security strategy includes advanced firewalls, heuristic AI-based agents that monitor for anomalies, and device hardening guides that ensure all endpoints are configured securely. This comprehensive approach contrasts with reliance solely on conventional virus scanners, showcasing a forward-thinking attitude towards cybersecurity.
Patching and Monitoring: Regular system updates and vigilant monitoring are paramount to maintaining the organization's security integrity. Microsoft’s tools manage patching processes effectively, while constant analyses are conducted to identify risks and address them proactively.
Training Initiatives: Recognizing that many cybersecurity incidents stem from user errors, ongoing education about cybersecurity is essential for all employees. Training programs are designed to cover various topics, including phishing awareness, social engineering recognition, and routine updates delivered through newsletters, reinforcing vital concepts to mitigate risks.

Incident Management Procedures

Ken outlined the structured processes Core Laboratories follows in the event of a security incident.

Response to Breaches: In the event of a suspected security breach, the protocol calls for an immediate quarantine of compromised systems. This containment step is critical to preventing further damage and aids in the investigation process. Once a breach is identified, a thorough assessment is undertaken to determine the extent of the compromised data or systems. Additionally, user accounts that could have been affected are disabled pending further evaluation and additional training to ensure the user understands the mistake made and how to avoid future incidents.
Documentation for Breaches: Core Laboratories maintains detailed institutional policies that provide frameworks for categorizing and reporting security events. This ensures compliance with regulations and facilitates clear communication with relevant executives, stakeholders, and legal personnel involved in incident management.

Cybersecurity Costs

The financial aspect of maintaining an effective cybersecurity and IT infrastructure is significant.

Cost of Security Infrastructure: Core Laboratories allocates a budget that exceeds one million USD annually for cybersecurity measures and IT infrastructure, specifically focusing on the management and protection of 4,000 endpoints. This investment highlights the company’s commitment to safeguarding its operations and data against evolving cyber threats.
Cost vs. Risk: Ken emphasizes the importance of understanding the 'cost of doing nothing' in terms of cybersecurity. Investing in robust cybersecurity measures is less about immediate financial implications and more about mitigating the risks associated with potential operational disruptions that could result from cyber incidents.

Tools and Applications Used

The IT department at Core Laboratories employs a range of advanced applications and tools to bolster security.

Specific Applications: Among these tools, multi-factor authentication systems, particularly RSA servers, are utilized for enhanced security during login processes. Due to the sensitive nature of their operations, much of their security-related software is proprietary and undisclosed, underscoring the critical importance placed on safeguarding their technological assets.
Server Room Management: Core Laboratories operates multiple server rooms on a global scale, with over 200 servers managed and monitored continuously by their dedicated IT team. This comprehensive management ensures high availability and reliability of services while facilitating rapid responses to any issues that may arise.

Cable Infrastructure and Network Breaches

The organization’s connection types are pivotal to its operational security and functionality.

Connection Types: Core Laboratories predominantly relies on fiber connections to facilitate high-speed data transfers. However, in situations where fiber is not viable, alternative options such as cellular networks and satellite communications are used. The type of connection impacts the potential vulnerabilities, as fiber connections can be more susceptible to targeted attacks that often aim for the main firewalls protecting corporate networks.
Physical Security Concerns: Although the organization has established protocols to address physical breaches, there is a significant reliance on existing infrastructure and IT security policies to deter potential threats. This highlights a need for continuous review and enhancement of physical security measures to complement the existing IT safeguards.

Training and Employee Engagement

Core Laboratories places a strong emphasis on continuous education and employee engagement as essential components of its cybersecurity strategy.

Emphasis on Education: Regular training updates and newsletters are distributed to all employees to raise awareness regarding cybersecurity challenges. This is particularly crucial during higher-risk periods, such as holiday shopping seasons when phishing attacks tend to rise.
Client Awareness: The organization fosters strong employee-client relationships and promotes a proactive approach to cybersecurity. This is achieved by avoiding the use of complex terminologies that may alienate employees and instead emphasizing collaborative education and support.

Final Thoughts and Future Considerations

Ken highlights the challenges ahead for cybersecurity in the face of rapidly evolving technology.

Challenges Ahead: He underscores the importance of adaptation to counter the emerging threats posed by advancements in AI and quantum computing technologies. As these technologies evolve, the responsibility lies with the next generation of IT professionals to bridge knowledge gaps and stay ahead of potential cybersecurity threats.
Ongoing Communication: Ken encourages fostering open lines of communication and prioritizing education as pivotal strategies for enhancing security within the organization. By nurturing a workplace environment where every employee feels valued and informed, Core Laboratories positions itself to navigate the complexities of modern cybersecurity successfully.

Infrastructure Description and IT Security Response

Security Mechanisms (justification of the approach)

The security landscape at Core Laboratories is underpinned by a multi-layered security strategy designed to address current and emerging threats in the IT environment. This layered approach includes:

Advanced Firewalls: Positioning numerous firewalls throughout global offices establishes a first line of defense against unauthorized access and attacks.
Heuristic AI-Based Monitoring: Utilizing artificial intelligence for anomaly detection surpasses traditional virus scanning, offering proactive threat detection.
Device Hardening Guides: These ensure that endpoints are configured securely, reducing vulnerabilities exposed to potential threats.
Regular System Updates and Active Monitoring: Employing Microsoft's tools for patch management and constant risk assessments aids in maintaining the integrity of the organization's IT framework.
Education and Training Initiatives: Continued employee training programs concerning cybersecurity best practices are integral to mitigating human-factor vulnerabilities.

Conclusion

"Could you provide a brief introduction of the Senior Manager of Global IT Services at Core Laboratories, including the primary roles and responsibilities within the organization?"

The Senior Manager of Global IT Services at Core Laboratories is Ken Chilton, who oversees the IT infrastructure, encompassing responsibilities in management of IT security, network connectivity, and departmental coordination. His leadership ensures effective collaboration among dedicated teams for development, maintenance, and IT security across the organization.

"What is the average number of individuals employed by the organization, specifically within the IT department?"

Approximately 30 individuals are directly involved in IT security efforts internationally.

"What types and quantities of physical devices are utilized within the organization (e.g., PCs, laptops, printers, scanners, and servers)?"

Core Laboratories utilizes a range of physical devices, including hundreds of firewalls, over 200 servers, PCs, laptops, and networking devices across its 120 offices located in 70 countries.

"What types of network connectivities are used within the organization (e.g., Internet, LAN, MAN, WAN)? Additionally, what security measures are implemented to ensure the safety of these networks?"

The organization employs simple internet connections augmented by Cisco Meraki's software-defined wide area networks (SD-WAN) for enhanced performance. Security mechanisms include a multi-layered approach with advanced firewalls and heuristic AI-based monitoring.

"What security mechanisms are employed by the organization's security department? What procedures are in place to address security issues, such as anti-malware, anti-virus, or other tools?"

Security mechanisms consist of layered strategies including firewalls, anomaly detection through AI, regular updates, and employee cybersecurity training. Incident management includes quarantining compromised systems during breaches.

"What is the estimated total cost of maintaining IT infrastructure security and implementing a comprehensive cybersecurity mechanism within the organization?"

The total estimated cost for maintaining cybersecurity measures and IT infrastructure at Core Laboratories exceeds one million USD annually, focusing on the protection of 4,000 endpoints.

"Are there any special applications or software specifically used by the organization to enhance its operations?"

Multi-factor authentication tools, specifically RSA servers, are utilized for login security, alongside proprietary software for the sensitive nature of operations.

"Does the organization utilize hardware or software designed for completing or managing specific tasks?"

Core Laboratories operates multiple server rooms globally, managing over 200 servers to ensure reliability and efficiency.

"Does the organization maintain a server room? If so, how many servers are required to effectively manage operations?"

Core Laboratories operates multiple server rooms globally, managing over 200 servers to ensure reliability and efficiency.

"What types of cables are used for connecting to the Internet, linking equipment, and other related purposes within the organization?"

Predominantly fiber connections are used for high-speed data transfers; however, cellular and satellite options are available when necessary.

"How does the organization handle IT infrastructure maintenance in a facility of this scale?"

IT infrastructure maintenance in the extensive organization is managed by a dedicated IT team ensuring operational continuity.

"What are the biggest challenges encountered when managing security in an organization of this size?"

The primary challenges include keeping up with rapidly evolving threats and safeguarding against insider risks. Regular security testing, including penetration testing, is conducted to identify vulnerabilities.

"Does the organization conduct regular security testing, such as penetration testing and vulnerability assessments, to identify and address potential weaknesses?"

Yes, regular security testing, including penetration testing, is conducted to identify vulnerabilities.

"Are employees provided with regular security training? If so, what protocols are enforced to maintain cybersecurity awareness and compliance?"

Regular training and updates about cybersecurity best practices are enforced to maintain awareness and compliance among employees, covering topics such as phishing and social engineering.

"In the event of a cyberattack affecting the organization’s systems or the entire operation, how would the organization manage the attack and its impact? What steps are taken to resolve issues during and after the attack?"

In the event of a cyberattack, compromised systems are quarantined, investigations initiated, and affected users retrained. Protocols are in place to handle insider threats and protect customer information, including compliance with institutional policies and frameworks.

"How does the organization address incidents caused by internal actors, such as an attack originating from someone within the department?"

Preventative measures include employee training on recognizing phishing attempts. In the case of incidents arising from such attacks, immediate investigation and resolution procedures are enacted.

"What measures are taken to protect customer information in the event of a data breach?"

The organization has protocols that ensure compliance with regulations and facilitates clear communication with relevant executives, stakeholders, and legal personnel involved in incident management.

"Hypothetically, if the organization were to face an insider attack resulting from an employee clicking a link in a phishing email, what mechanisms are in place to prevent such incidents? How would the issue be resolved if it occurred?"

Preventative measures include employee training on recognizing phishing attempts. In the case of incidents arising from such attacks, immediate investigation and resolution procedures are enacted.

"What are the primary cybersecurity risks that the organization aims to protect against? Could the organization describe its incident response plan for addressing these risks?"

Core Laboratories aims to protect against a range of cybersecurity risks, including data breaches and insider threats. An incident response plan provides structured actions to address these risks effectively.