Homework: Create an Incident Response Policy
Learning Objectives and Outcomes
i. Create an incident response policy for a health care organization.
ii. Explore policy creation for incident response for a health care organization.
Scenario
You work for a large, private healthcare organization that has server, mainframe, and RSA user access. Sean, your manager, has been asked to provide the latest version of the organization's incident response policy. To his knowledge, no policy exists. He has asked you to research and create an incident response policy over the weekend.
Task
Look for at least two incident response policies from other organizations of a similar type to your organization. In addition, download NIST "Computer Security Incident Handling Guide, rev 2" SP800-61.
i. Based on your research, create a detailed draft incident response policy for your organization.
ii. Consider HIPAA and other health care-related compliance requirements.
iii. Create a summary report that justifies the content you included in the draft policy.
iv. Reference your research so that Sean may add or refine this report before submission to senior management.
v. Describe clear compliance requirements from HIPAA and two other related compliance sources. Sources are used to justify compliance requirements in policy.
vi. Include and cite at least three examples of similar incident response policies from other health care organizations. Also cite use of NIST SP 800-61 as well.
Format your homework according to the following formatting requirements:
i) The answer should be typed, using Times New Roman font (size 12), double spaced, with one-inch margins on all sides.
ii) The response also includes a cover page containing the title of the homework, the student's name, the course title, and the date. The cover page is not included in the required page length.
iii) Also include a reference page. The Citations and references must follow APA format. The reference page is not included in the required page length.