Most organizations and companies work hard to avoid security incidents. However, it is virtually certain that a security incident is going to occur at some point. This is why it is important that an incident response plan is put into place well before an incident takes place. What are the greatest challenges that security managers and organizations face when it comes to developing an effective incident response plan? DO NOT WRITE BULLET POINTS, this should be like you are answering the questions.

Most organizations and companies work hard to avoid security incidents. However, it is virtually certain that a security incident is going to occur at some point. This is why it is important that an incident response plan is put into place well before an incident takes place. What are the greatest challenges that security managers and organizations face when it comes to developing an effective incident response plan? DO NOT WRITE BULLET POINTS, this should be like you are answering the questions.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter5: Developing The Security Program

Section: Chapter Questions

Problem 1E

See similar textbooks

Similar questions

Within incident preparation, the first step is to create a policy for incident response and to get the top management's agreement/approval on the policy. An incident response policy describes the standard methods used by the organization for handling information security incidents. Explain two main benefits of having such a policy prepared and approved.
What are the recommended response timeframes for different levels of security incidents, and can you provide an illustrative example for each level?
The definition of an incident varies from organization to organization. From your perspective and individual research, what is the definition of an incident and what needs to have occured in order for a security event to be declared an incident. What is the roles and responsibilities of the Incident Responder?
What is a Containment Strategy for an Incident? Give one example and talk about it.
There are two graphs presented from the CERT on reported incidents and vulnerabilities. Keep in mind the difference between an incident and vulnerability. While these charts are dated they still provide valuable trend information that continues to rise. Today, both security incidents and security vulnerabilities continue to rise for a variety of reasons. What reasons can you provide for the continuing upwards trend in the number of incidents reported? You should provide at least four (4) reasons with supporting data and reasoned arguments to support your answer. Good answers will provide facts, reasoned arguments and references that go beyond anecdotal information. Explain using facts, reasoned arguments and references that go beyond anecdotal information and link sources.
There are two graphs presented from the CERT on reported incidents and vulnerabilities. Keep in mind the difference between an incident and vulnerability. While these charts are dated they still provide valuable trend information that continues to rise. Today, both security incidents and security vulnerabilities continue to rise for a variety of reasons. What reasons can you provide for the continuing upwards trend in the number of incidents reported? You should provide at least four (4) reasons with supporting data and reasoned arguments to support your answer. Good answers will provide facts, reasoned arguments and references that go beyond anecdotal information. Explain using facts, reasoned arguments and references that go beyond anecdotal information and link to sources. PLEASE ADD YOUR SOURCES! Please have clear writing as well! Thank you!
When it comes to security breaches, how can we tell the difference between passive and aggressive attacks? There are many reasons why active assaults provide a greater threat than passive. Your replies should be supported by concrete examples.
Taking a deep dive into the theories and ideas that underpin security management and describing them in depth is the focus of this course.
To learn more about your institution's security rules, look them up on the intranet or website. Is there a corporate security policy somewhere? Where have you come across security rules that are tailored to address a particular problem? What agency or department is in charge of issuing or coordinating all of these policies, or are they dispersed across the organization? Use the framework provided in this chapter to determine whether or not the policies you found in the preceding exercise are complete. What are the omissions in these areas?
When we speak of physical security, what precisely do we mean, and how does it stack up against other types of safety? In today's world, what dangers pose the greatest risk to a person's physical well-being? How do they get their name out there, and what form do their structural criticisms of the organization take?
In the context of the concept of safety, what does the term "security" even entail? Which current issues with physical security are most pressing, and how may they be fixed? There are a wide variety of ways in which an organization might be attacked.
Which of the following is the best description of purpose of risk management? a. To implement measures to reduce risks to an acceptable level. b. To outline the threats to which IT resources are exposed. c. To determine the damage caused by possible security incidents. d. To determine the probability that a certain risk will occur.