When faced with increasing cyberattacks, the best response is to revalidate and mitigate risks to an acceptable level. This involves conducting a risk assessment to identify the organization's most critical assets, the threats to those assets, and the likelihood of those threats occurring. Based on the results of the risk assessment, the organization can prioritize and implement mitigation measures to reduce the risk to an acceptable level.
While increasing budget and staffing levels for the incident response team and implementing an intrusion detection system (IDS) may also be important steps in reducing risk, they should be done in conjunction with a risk assessment and risk mitigation plan. Testing the business continuity plan (BCP) is also important for ensuring the organization's readiness for a potential security incident, but it does not directly reduce the risk of a cyberattack. By revalidating and mitigating risks to an acceptable level, the organization can proactively reduce its risk of a successful cyberattack.

Deliver an information security awareness campaign is the BEST approach to obtain support for a new organization-wide information security program. An information security awareness campaign is a great way to raise awareness of the importance of information security and the impact it can have on an organization. It helps to ensure that all stakeholders understand the importance of information security and are aware of the risks associated with it. Additionally, an effective awareness campaign can help to ensure that everyone in the organization is aware of the cybersecurity policies, procedures, and best practices that must be followed.