Reference no: EM131330333
Even with the best security system, an organization's information systems are never fully safe from outside attacks or malicious activities from insiders. As a result, an organization must be prepared to take curative measures when an incident occurs. As a security professional, you should have knowledge and expertise in incident response and should be able to explain the necessity of incident response systems to the higher management.
For this Assignment, select an arbitrary organization. You may choose one with which you are familiar, but you do not need to disclose its identity. Assume you are the IT security manager. You frequently find traffic to and from suspicious websites which could indicate malware, a configuration problem, or misuse. You think that, as a starting point, having an incident response plan in place would be beneficial. You decide to submit a proposal to your CEO.
Based on your readings and through additional research write a 4- to 6-page proposal to the CEO. Use this as an outline for your proposal:
Begin your proposal by briefly describing the organization and its nature of functions. Again, if it is one with which you are familiar, you do not need to identify it.
Your proposal should include the following sections:
- Incident Response Plan Details:
- Explain the benefits of an incident response plan.
- Identify and explain with reasonable details the steps to isolate, respond, and recover after an attack (incident) is discovered.
- Identify the teams that should be involved in the incident response process. Explain their roles.
- Incident Communication Requirements:
- Identify and explain the type of communication and reporting to different internal stakeholders that will be necessary after you have discovered an attack.
- What are the legal, ethical, and other considerations if personal customer data has been stolen?
- Considering the breach laws in your home country, at which point would you disclose such a breach to law enforcement and communicate with customers?
|
Replacement part at much lower cost
: You accidently broke your refrigerator door handle.The appliance company that made the refrigerator can express ship you a replacement handle, for which it has copyrighted the design. But instead of buying the copyrighted replacement part, you use..
|
|
Large domestic and foreign information system
: Assume that you have been hired to manage a large domestic and foreign information system. what are some of the issues and solution that you would discuss and plan.
|
|
Identify two career option someone with accounting education
: Describe at least two career options someone with an accounting education can pursue. Be sure to reference sources such as the Bureau of Labor Statistics and the American Institute of Certified Public Accountants.
|
|
Learning objectives and outcomes
: You will review the Fourth Amendment and will be able to analyze the specific exceptions to the application of this right. Assignment Requirements
|
|
Organization information systems
: Even with the best security system, an organization's information systems are never fully safe from outside attacks or malicious activities from insiders. As a result, an organization must be prepared to take curative measures when an incident occ..
|
|
Explain how the use of this element enhances the work
: Gabrieal Marquez is famous for using a literary style which because of his work came to be know as magical realism. define the term, locate examples in the novel of "love and other demons" and explain how the use of this element enhances the work ..
|
|
Current knowledge of networking
: Draw a network. Demonstrate your current knowledge of networking as compared to the knowledge at the beginning of Networking I.
|
|
Banking information close
: A goal of fragmentation in a distributed database is to improve performance by moving copies of the data closer to the users. (Example: In a banking situation, having my banking information close to me in my home state of Maryland and in Californi..
|
|
Problem regarding the directory services
: You were hired as a consultant to analyze an existing Windows Server environment in a utilizing Windows Server 2003 and 2008. The local IT administrator has heard about virtualization and cloud technology and wants to know how his company's networ..
|