Homework
24/7 monitoring of all network activity is an invaluable tool for enhancing your security posture. An effective Incident Response Plan (IRP) is essential to mitigation of attacks, while a Disaster Recovery Plan (DRP) provides support for unexpected environmental obstacles to information systems. For both IRP and DRP, a company must develop strategies to recover from unexpected interruptions, and exercise these plans to ensure all applicable personnel are prepped and aware of their roles. In Topic 5, a minor Business Impact Analysis (BIA) was conducted, which identified the critical assets to the company. These assets will be used to aid in the development of a contingency plan to ensure business continuity in the presence of an event.
This homework exercises the analysis and development of a Lite Contingency Plan (BIA, IRP, DRP, and Business Continuity Plan: BCP). The development of a workflow diagram is essential in displaying the relationship between the four components. This is critical for the IRP and DRP, as an IRP can launch a DRP when a threat disrupts a system through ransomware, DDoS, or other malicious attacks against a system.
Use the following guidelines to create an 8 to 12 pages report using the same corporate profile selected earlier.
1. Business Impact Analysis
• In one to two paragraphs, summarize the objective of conducting a BIA for your selected company. Describe the benefits, potential outcomes, and company enhancements.
• Obtain the list of threats against the assets identified in your Topic 5 homework, "Risk Management Assessment and Control," and place them in a table.
• Prioritize this list from highest impact to lowest impact to the company.
• Add a column and describe how loss of the process, system, data, etc., will impact the company.
• Assuming worst-case scenario, add a column and describe the appropriate measures to recover from the threat.
2. Incident Response Plan (IRP)
In three to four pages, detail an IRP to include:
• Brief overview
• Roles and responsibilities (from Users to CISO)
• Reporting guidelines
• Example workflows diagram - Event to resolution
• Explain the six stages of incident handling as it relates to the company
• Escalation procedures with an associated chart
3. Disaster Recovery Plan (DRP)
Establish a DRP Policy in one to two pages that contains the following in alignment with the company:
• Purpose
• Scope
• Roles and responsibilities
• Resource requirements
• Training requirements
• Exercise and testing schedules (include IRP exercise and schedules)
• Plan maintenance schedules
4. Business Continuity Plan (BRP)
In three to four pages, close out the homework with a complete BC Plan that includes the following:
• Describe which usage strategy (Hot site, Warm site, or Cold site) the company will use and why (explain the benefit to the company).
• Explain how the company will use and sustain the usage strategy.
• Detail the critical systems/assets recovery procedures.
• Provide processes to reestablish business operations and security operations. Include disaster to alternate site and restoration back to original state.
• Provide and describe a worst-case scenario timeline (disaster to recovery).
• Describe readiness, training, exercises, and BC process reviews/updates.
Format your homework according to the give formatting requirements:
• The answer must be using Times New Roman font (size 12), double spaced, typed, with one-inch margins on all sides.
• The response also includes a cover page containing the student's name, the title of the homework, the course title, and the date. The cover page is not included in the required page length.
• Also include a reference page. The references and Citations should follow APA format. The reference page is not included in the required page length.