Computer Emergency Readiness Team Paper

As stated earlier, the 9/11 attacks revealed the indomitable spirit of the US and awakened a sleeping giant, which was very reminiscent of the US response following the attacks by the Japanese on US forces in Hawaii. Both 9/11 and Pearl Harbor attacks galvanized the American people into action and caused the government to heavily invest resources to combat enemies of the US; the Axis enemies during World War II and “the terrorists”, wherever they may be located, following 9/11. One of the first NIST deficiencies to be corrected were the operational protocols for intra- and inter-agency communication. This, in part, has been addressed in the Incident Command System (ICS) since the purpose of ICS is to integrate operations between public safety entities at all levels of government.

* Recommend other IT security policies that can help mitigate all known risks, threats, and

Among one of the missions of The U.S. Department of Homeland Security is to protect and preserve the security of the Cyberspace in the country. The principal objective of this Security Plan is to give instructions and direction for the Department’s workers and help the Homeland Security to create best practices and strategies in the IT security system.

The National Incident Management System is a systematic guideline on how to effectively plan, mitigate, respond and recover, from significant incidences especially those that encompass diverse interest and involves all levels of governments. It works hand in hand with the National Response Framework, which provides structure for incident management while NIMS provide the guide for all departments and agencies at all levels of government, nongovernmental organizations, and the private sector to work flawlessly during incident management to reduce loss of life and property (U. S. Department of Homeland Security, 2008). The core aspect of the National Incident Management System during incident response is the Incident Command System (ICS),

Good Business Continuity Planning starts with being proactive. That means taking concrete steps to plan for an incident much before it actually strikes. There is no one single approach that fits for all types of incidents as no two emergencies are identical. Much of business continuity planning varies based on the size of the company, company’s line of business, and the locations of the company, customers and suppliers.

An executive order issued by President George W. Bush on October 16, 2001 established the President’s Critical Infrastructure Protection Board. The Board was created with the goals of coordinating “cooperation with and protection of private sector critical infrastructure, state and local governments critical infrastructure, and supporting programs in corporate and academic organization; protection of federal departments and agencies critical infrastructure; and related national security programs” (The White House).

The entire company will benefit from the incident response plan. However, those who are directly involved in the incident process will find this document to be the most helpful. This incident response plan will be a primary resource to the Chief Information Security Officer, all those who are a part of the Incident Response Team, and anyone else deemed necessary to complete the many facets of this plan. In order to lead a successful recovery process, it is the responsibility of all those involved to fully understand the importance of confidentiality, integrity, and availability of Zara’s assets, especially this document. While the preparation components to this plan should be established prior to an incident, the plan will not fully come into effect until the Chief Information Security Officer declares a disaster has occurred. The steps

The Department of Homeland Security (DHS) is Incharge of shielding our country’s crucial infrastructure from physical and cyber dangers. Of the varied kinds of infrastructure, cyberspace is crucial constituting the information regarding the government and business operations, crisis management and readiness information, and our crucial digital and process control systems. Safeguarding these critical resources and infrastructure is

49). In order for all of the leaders of the different infrastructures to be successful at eliminating or mitigating such attacks they will need a common form of communication as all of their systems have been proven to affect each other. One tool to help eliminate such communication barriers is the National Incident Management System (NIMS). This system “is a standardized management plan that provides a core set of concepts for incident command and multi-agency coordination during emergency response” (Kamien, 2012, p. 486). With such systems as NIMS the government realized that no one system can work without the other and if one fails they all fail causing wide spread panic and various other hurdles for emergency responders to respond to. It is up to the government to realize that our world is no longer ran manually, but rather digitally so that we can better prepare for possible cyber attacks on our key critical infrastructures.

MAGALHAES, R. (2005, MAY). THE BUSINESS CONTINUITY PLAN RECOVERY DOCUMENT. RETRIEVED ON FEBRUARY 23, 2007, FROM

Incident response and planning is very critical to a business. It’s important Greiblock Credit Union (GCU) financial firm maintain control of these incidents in a timely manner which could reduce cost, and risks. When responding to incidents one should always minimize the severity of all security incidents. The analyst should have a clear plan to resolving incidents, while containing the damage and reducing risks (Cichonski et al., 2012). According to Cichonski et all, (2012) most departments have a Computer Security Incident Response team, or designated personnel to handle the variety of incident responses related to Cyber Security. Based on the below, the information can be used in a technique to help an organization to determine the threat against the organization and identify if it’s truly a security breach or serious

Action shall be based on the approved incident response plan” (The Computer Technology Documentation Project, 2015).

A BCP may be written for business processes within a single business unit or may address the entire organization’s processes. The BCP may also be scoped to address only the functions deemed to be priorities. A BCP is an ongoing commitment with no established start and end date. NIST has outlined the seven progressive steps needed to maintain an effective contingency plan for all information systems. The seven steps are as follows (Swanson, Bowen, Phillips, Gallup, & Lynes, 2010):

The risks that face an organization are going to always be present. However, an incident response plan outlines procedures for handling security incidents that occur within the organization and for correcting and documenting the security issue in a timely manner. The incident response team is trained to effectively implement the incident response plan. By containing an attack, and limiting the amount of time that an attack is allowed to continue, further risks to the organization can be mitigated.

Using the cybersecurity framework, the Federal Highway Administation (FHWA) is creating a tool for state and local transportation agencies. The tool will be one part of the overall agency response to the emergent cyber resilience challenge. To develop the tool, the FHWA will tailor the NIST framework for transportation agencies with help from industry and operating agencies. The tool, now in the early stages of planning, will include a structured cybersecurity assessment and development program for the transportation community of practice. Transportation agencies will be able to use the tailored framework as a self-assessment tool to evaluate their current practices and to identify where they can improve current cybersecurity activities and programs. The goal of the tool is to improve the overall protection and resilience of the nation’s highway infrastructure.