Author Question: What is an incidence response plan and what are the steps involved in it? What will be an ideal ... (Read 91 times)

dejastew · **on:** Jul 7, 2018

What is an incidence response plan and what are the steps involved in it?

What will be an ideal response?

Question 2

What is the purpose of a risk matrix in an organization?

What will be an ideal response?

tennis14576 · **Reply #1 on:** Jul 7, 2018

Answer to Question 1

An incidence response plan is used to avoid chaos and missteps when something happens, and helps staff categorize the threat, determine the cause, preserve any evidence, and also get the systems back online so the organization can resume business. It consists of five major steps. The first is to identify the threat by communicating with the crisis management team. Next is to contain the damage which involves taking systems offline and restricting system access. The third step is to determine the cause which involves investigating logs and preserving evidence. The fourth step is to recover the systems by restoring from media known to be good and getting the organization up and running. The last step consists of evaluating lessons learned by prosecuting the offender, improving systems, and reevaluating the risk matrix.

Answer to Question 2

An organization's risk assessment examines its vulnerabilities to determine how effective its existing security measures are. The risk matrix lists the vulnerabilities in a table, and managers rate the level of risk each one presents in areas such as confidentiality, company reputation, finances, or downtime. The matrix also includes an estimate of how likely that event might be, and managers may add other metrics to further refine the analysis for their own organizations. The matrix helps focus attention on the vulnerabilities that pose the greatest potential dangers.