Answer to Question 1
An incidence response plan is used to avoid chaos and missteps when something happens, and helps staff categorize the threat, determine the cause, preserve any evidence, and also get the systems back online so the organization can resume business. It consists of five major steps. The first is to identify the threat by communicating with the crisis management team. Next is to contain the damage which involves taking systems offline and restricting system access. The third step is to determine the cause which involves investigating logs and preserving evidence. The fourth step is to recover the systems by restoring from media known to be good and getting the organization up and running. The last step consists of evaluating lessons learned by prosecuting the offender, improving systems, and reevaluating the risk matrix.
Answer to Question 2
An organization's risk assessment examines its vulnerabilities to determine how effective its existing security measures are. The risk matrix lists the vulnerabilities in a table, and managers rate the level of risk each one presents in areas such as confidentiality, company reputation, finances, or downtime. The matrix also includes an estimate of how likely that event might be, and managers may add other metrics to further refine the analysis for their own organizations. The matrix helps focus attention on the vulnerabilities that pose the greatest potential dangers.
Cancer Survival Rates According to Psychological Response to Diagnosis
Basic steps in hemostasis
The Stress Response
A simplified overview of the genes and regulatory units involved in the control of lactose metabolis
The hierarchy of genes involved in establishing the segmented body plan in Drosophila
Proposed steps in the evolution of jaws