Essay On Enterprise Security

Planning, organizing, directing, and controlling will build on each other during this emergency. The planning process in the scenario started with the initial response to the incident. The IC will use the planning process to provide strategic, operational, and tactical planning to develop an Incident Action Plan (IAP) once he gets and understanding of the situation. Once the IC has formulated reasonable incident objects and strategies, then the IC will prioritize them. This will help the IC plan for and determine what specific resources and support requirements are necessary for an effective response, and develop a plan to make the best use of these resources and support functions.

Lab #1 – Part A – List of Risks, Threats, and Vulnerabilities Commonly Found in an IT Infrastructure

Incident response is written as a policy to ensure correct handling of an incident such as lost or stolen technology resources and gives the appropriate procedures on what to do if an incident happens.

First, Incident Response (IR) plan “is a detailed set of processes and procedures that anticipate, detect, and mitigate the effects of an unexpected event that might compromise information resources and assets.” (Whitman, 2013, p. 85). Consequently, Incident response planning (IRP) is the planning for an incident, which occurs when an attack affects information systems causing disruptions. On the other hand, Disaster Recovery (DR) plan “entails the preparation for and recovery from a disaster, whether natural or human-made.” (Whitman, 2013, p. 97). For instance, events categorized as disasters include fire, flood, storm or earthquake. Thus, the differences between an Incident Response (IR) plan and a Disaster Recovery (DR)

Security planning for any data system should always include an incident response plan. “An incident response (IR) plan is a detailed set of processes and procedures that anticipate, detect, and mitigate the effects of an unexpected event that might compromise information resources and assets” (Whitman, 2006, pg. 92). The institution of such a plan will hopefully reduce down time should any incidents occur.

All employees, business associates and vendors will be made aware of the security policies set forth in this document that must be carried out until further notified. The security standards set forth to carry out this plan have been trialed and

This protection plan will address any security incidents such as security breach or emergency in the organization. The focus will be a coordination mechanisms which will be required to attain the vision and goals of the business prepared and instructed in an incident report. During the critical infrastructure protection plan there will be the need to review and revise any changes and prioritize to respond to changes in threat, technology, environment, business continuity, and other

The incident response policy is very useful as it offers guidance on how to handle the situation when data has been breached. Through the policy security experts can restore the situation to normal and ensure that business runs again as usual without incurring to much losses due to time wastage. The policy gives clear guidance of the tasks and activities that should be carried out by the employees and the managers including procedures, reporting and feedback mechanism (Butler, 2015).

A Disaster Recovery Plan is an essential element of a comprehensive Business Recovery Program. Other elements include the Business Continuity Plan, the Business Impact Analysis, the Vital Records List, and the Emergency Response Plan.

Incident recovery begins with implementing the back-up and recovery plan which should already be in place

Action shall be based on the approved incident response plan” (The Computer Technology Documentation Project, 2015).

This policy is guided by the ISO/IEC 27002:2013 Information technology - Security techniques -Code of practice for information security controls and sets out our requirements for effectively managing information security in a risk based manner.

According to Mroszczyk (2012) a firefighting system is undoubtedly the utmost significant of the building amenities, as its aim is to protect human life and property. An effective Emergency Action and Response Plan, are equivalent of an Operations Plan are just as important and a fire fighting system. A plan references a planned response that follows a well manage and defined targeted event(s). The purpose of the incident action plan is to establish objectives or list priorities, describe reaction schemes and strategies, and to be coherent what is to be accomplished within a defined period of time to manage targeted incidents/events.

The risks that face an organization are going to always be present. However, an incident response plan outlines procedures for handling security incidents that occur within the organization and for correcting and documenting the security issue in a timely manner. The incident response team is trained to effectively implement the incident response plan. By containing an attack, and limiting the amount of time that an attack is allowed to continue, further risks to the organization can be mitigated.

Planning is considered to be a primary function of management. All organisations operate in a complex, dynamic and competitive business environment, and therefore, have to plan their actions without which they may not be able to survive.