Virus Attacks

Make contingency plans - Identify any unexpected risks or problems that could affect the accomplishment of planned objectives, and have a backup plan to cope with the situation. Contingency plans can be activated when there is an emergency, an immediate need to make alterations or improvements, or a problem that affects

Planning, organizing, directing, and controlling will build on each other during this emergency. The planning process in the scenario started with the initial response to the incident. The IC will use the planning process to provide strategic, operational, and tactical planning to develop an Incident Action Plan (IAP) once he gets and understanding of the situation. Once the IC has formulated reasonable incident objects and strategies, then the IC will prioritize them. This will help the IC plan for and determine what specific resources and support requirements are necessary for an effective response, and develop a plan to make the best use of these resources and support functions.

Good Business Continuity Planning starts with being proactive. That means taking concrete steps to plan for an incident much before it actually strikes. There is no one single approach that fits for all types of incidents as no two emergencies are identical. Much of business continuity planning varies based on the size of the company, company’s line of business, and the locations of the company, customers and suppliers.

Incident response is written as a policy to ensure correct handling of an incident such as lost or stolen technology resources and gives the appropriate procedures on what to do if an incident happens.

It includes also the preparation of procedures needed to communicate these plans to all concerned.

Security planning for any data system should always include an incident response plan. “An incident response (IR) plan is a detailed set of processes and procedures that anticipate, detect, and mitigate the effects of an unexpected event that might compromise information resources and assets” (Whitman, 2006, pg. 92). The institution of such a plan will hopefully reduce down time should any incidents occur.

This protection plan will address any security incidents such as security breach or emergency in the organization. The focus will be a coordination mechanisms which will be required to attain the vision and goals of the business prepared and instructed in an incident report. During the critical infrastructure protection plan there will be the need to review and revise any changes and prioritize to respond to changes in threat, technology, environment, business continuity, and other

Incident response and planning is very critical to a business. It’s important Greiblock Credit Union (GCU) financial firm maintain control of these incidents in a timely manner which could reduce cost, and risks. When responding to incidents one should always minimize the severity of all security incidents. The analyst should have a clear plan to resolving incidents, while containing the damage and reducing risks (Cichonski et al., 2012). According to Cichonski et all, (2012) most departments have a Computer Security Incident Response team, or designated personnel to handle the variety of incident responses related to Cyber Security. Based on the below, the information can be used in a technique to help an organization to determine the threat against the organization and identify if it’s truly a security breach or serious

[Give the mission of the organization; describe the purpose for the plan; explain under what circumstances it would be activated; explain how the plan will be used by the organization; depict the expected outcome of the plan activation; give the assumptions used in the development of the plan; and give an overview of the structure that will implement it.

Incident response begins with prevention and security awareness (figure 1). In the case of malware attacks such as viruses, worms or Trojan horses, defense-in-depth plays a large role in the defense and early detection of potential threats to information systems connected to the internet. Personnel utilizing these assets also play a large role in defending and protecting these assets. Authorized users should be aware of all policies and procedures pertaining to the proper use of all networks, applications, and systems within the organization. The

The plan will involve preparedness/mitigation measures undertaken before the disaster, response activities, recovery and reconstruction efforts that are being undertaken after the disaster. We may consider which risk management agencies were involved and the actions they have undertaken so far.

For examples; A Routine incident response includes a policy that defines, in specific terms, what constitutes of an incident and providing a step-by-step process, followed through with an incident report."(Rouse, Margaret, N.P., 2000. Web. 2015). Incident reports are organized to address a security breach or address what happened after an attack on a civilian or humanity etc. This limits down damage and reduces recovery time and costs effectively. The key steps are: Preparation, Identification, Containment, Eradication, and

Develop the contingency planning policy. The policy provides as a guide during the development of a BCP; it assigns authority to the necessary roles to carryout required duties.

An important aspect I want to review is the disaster recovery plan. This plan is different from business continuity but some features do overlap. A disaster recovery plan prepares the business to recover their IT systems and assets after a disaster. Beginning with Wilma Stone, Margie Nelson, and Gary Thomas as management they need to meet with their IT department heads and perform a risk assessment to identify IT equipment and services that are critical to business operations. Identifying these critical components will give an initial point to recovery. As these are essential to business operations, the chosen IT systems should be priority in prevention, response, and during recovery. Charts and documents will help organize this and inform staff on the involved areas.

The risks that face an organization are going to always be present. However, an incident response plan outlines procedures for handling security incidents that occur within the organization and for correcting and documenting the security issue in a timely manner. The incident response team is trained to effectively implement the incident response plan. By containing an attack, and limiting the amount of time that an attack is allowed to continue, further risks to the organization can be mitigated.