Business Continuity and Incident Response

This presentation discusses the importance of business continuity planning and incident response in the context of a data breach incident in a government agency. It covers topics such as data breach risks, solutions, and the importance of incident response planning. The presentation emphasizes the need for intelligence information to identify and address future risks.

Business Continuity
and Incident
Response
Name of the Student
Name of the University

Introduction
The Chief Information Security Officer
or CISO of the Department of Computer
Science at the University of
Hertfordshire have been contacted by a
government agency for informing to
have stronger indications any data
breach, which includes critical data for
the Department of Computer Science. A
proper risk analysis of data breach is
required in this case.

Incident Background in the Government
Agency
A data breach had been occurred
recently in a specific government
agency. This type of data breach is
extremely dangerous for any
organization and should be eradicated
under every circumstance. This type of
data breach involves critical data. They
have contacted the CISO for
Department of Computer Science at
the University of Hertfordshire for this
purpose.

Incident Contd…
Although, the government agency has
contacted the Chief Information
Security Officer of the Department of
Computer Science at the University of
Hertfordshire and this CISO has decided
to initialize the incident response and
investigation processes; CISO realized
that his team is not well prepared.

Business Continuity
Planning Business continuity planning or
BCP is the plan that helps in
ensuring that the business
processes could continue during
the time of disaster (Andress
2014).
 These specific disasters might not
occur under normal conditions.
 The businesses should check for
the potential threats for ensuring
continued operations.

Data Breach
 Data breach can be stated as the
security incident, where information
would be accessed without
authorization (Disterer 2013).
 These data breaches could affect
the businesses as well as
consumers in a variety of ways.
 This data breach is the intentional
or unintentional release of
confidential information.

Data Breach Contd..
 Data breach involves disclosure of
unintentional information, data
spilling and data leakage (Von Solms
and Van Niekerk 2013).
 This data breach is the security
incident, where confidential or
sensitive information is being
transmitted or stolen.
 Data breach has occurred in the
government agency.

Risks to Data Breach
The major and the most significant risks to
the data breach are as follows:
 Personally Identifiable Information:
It involves data like social security
number and other personal information
and such data is hacked.
 Financial Information: It includes the
expiry dates, investment details and
charge card numbers and these should
be protected under every circumstance.

Risks Contd…
The other risks for data breach are as
follows:
 Legal Information: The next
important data breach target is legal
information. Since, it is a government
agency, legal data should be
protected (McIlwraith 2016).
 IT Security Data: The usernames,
passwords, security strategies,
network structure and encryption keys
are to be protected efficiently.

Solutions to the Risks in
Data Breach
The major solutions to the risks within
the data breach are as follows:
 Implementation of Anti Virus
Software: The proper
implementation of an anti virus
software is one of the most effective
and efficient solution for such risks
(Jouini, Rabai and Aissa 2014).
 Implementing Firewalls: Firewalls
act as the walls for intrusion entry.

Solutions Contd..
 Up gradation of Systems: The several
systems should be upgraded regularly
for resolving these types of issues in the
government agency (Disterer 2013).
 Backup and Recovery of Data:
Regular backup and recovery of data is
also effective to resolve issues like data
breaching.
 Configuring Security Controls: The
configuring of security controls is
effective for such issues.

Importance of Incident Response Plan
 The incident response plan is
extremely effective and efficient
strategy for eradicating the security
breach or data breach in the
government agency.
 It is effective for handling cyber
security incidents.
 Incident response plan could even
reduce the impact when they are
occurring.

Intelligence Information to
Actionable Leads in Future
Since, the Incident Response
Planning or IRP is an effective
strategy for strengthening the
defences against future incidents
for the government agency, it is
important to undertake
intelligence information towards
actionable leads in future.

Intelligence Importance
Contd..
 Intelligence is the collection as well as
processing of information regarding
data breaches and risks that are
required by the government agency to
understand the current scenario
(Baskerville, Spagnoletti and Kim 2014).
 Intelligence information collection also
helps to detect and identify the issues
or risks within government agency in
future time.

Conclusion
Therefore, it is concluded that incident
response planning would be effective
and efficient strategy for the
government agency that had been
facing data breaches in their business.
The CISO of University of Hertfordshire
would be helpful to reduce these data
breaches with this planning.

References
Andress, J., 2014. The basics of information security:
understanding the fundamentals of InfoSec in theory and
practice. Syngress.
Baskerville, R., Spagnoletti, P. and Kim, J., 2014. Incident-
centered information security: Managing a strategic balance
between prevention and response. Information &
management, 51(1), pp.138-151.
Disterer, G., 2013. ISO/IEC 27000, 27001 and 27002 for
information security management. Journal of Information
Security, 4(02), p.92.
Jouini, M., Rabai, L.B.A. and Aissa, A.B., 2014. Classification of
security threats in information systems. Procedia Computer
Science, 32, pp.489-496.
McIlwraith, A., 2016. Information security and employee
behaviour: how to reduce risk through employee education,
training and awareness. Routledge.
Von Solms, R. and Van Niekerk, J., 2013. From information
security to cyber security. computers & security, 38, pp.97-102.