Incident Response and its Management.

1.Legal and Ethical Challenges of Cybersecurity Analyze the ethical implications of cybersecurity policies and regulations put in place to protect the Confidentiality, Integrity, and Availability of Intellectual Property. Cybersecurity policies and regulations should support not interfere with organization workflow, and ultimately provide the three most crucial components of security: confidentiality, integrity, and availability. That is, policies should support people doing their jobs. Successful security policy needs to demonstrate to employees the value of security, not just the requirement for security. Thus, establishing adequate organizational culture is important as it affects security structure and policy. In 750-1,200 words, discuss organizational factors in light of Christian worldview by answering questions below: 1. How does trust grow in organizations? For example, in some organizations there is lots of trust at the base of the organization, but this trust does not nece

Running head: Management of Incident Response
Incident Response and its Management
Name of Student:
Name of University:
Author note:

1Incident Response and its Management
Introduction:
It can be defined as an approach for addressing and also managing an attack or breach
whenever there is a failure in the security measure (Carver et al., 2016). In this report it is
discussed about a plan which can be implemented to address and to manage an attack when
the security measures will fail in ABC software, Inc.
1st: Procedures to initially identify and document an incident
In case to initially identify any threat a plan must be generated, in case of a failure of
the security technology. A security team should be trained who will monitor for any unusual
events and detect if any. After the detection they must report the incident that have been
detected. For such plan the following processes must be followed:
i. Monitor
ii. Detect
iii. Alert
iv. Report
2nd: Procedures that will inform tactical operational managers, internal and
external stakeholders, and/or individuals affected
As the team will detect a threat they will immediately transfer the threats to the
operational departments so that they can take steps against the attack as soon as possible
(Tanguy et al., 2016).
3rd: Procedures to investigate the breach, to mitigate harm to individuals, and to
protect against further breaches
After the arrival of a breach, it is necessary to investigate about the breach. While
investigating there are certain aspects which should be kept in mind. Such as to check the

2Incident Response and its Management
weakness of a password, to check whether there is any human error or any failure of process
(Bromiley et al., 2016). It is also necessary to investigate the vulnerabilities for any old
system. After this investigation it will be easier to mitigate any harm on any individual and
also it will be easier to protect from any further attack.
4th: Enforcement mechanisms for breaches and non-adherences
Enforcement mechanisms in case of breaches and also for non-adherences depends on
the particular areas:
i. Capital requirements
ii. Large espousers
iii. Liquidity
iv. Reporting obligations
v. Governance
5th: Procedures to assess the damage to the organization and estimate both the
damage cost and the cost of the containment efforts
In case of any damage in the ABC software, Inc. the following steps are to be followed:
a. Evacuation of the system
b. Shut down power
c. Recovery plan.
6th: Procedures to review response and update policies
In case of reviewing the response and to update the policies the following steps are to be
followed:
a. The implementation is as it is intended.
b. Access should be done as they are used.

3Incident Response and its Management
c. Whether the circumstances are changed or not is to be determined.

4Incident Response and its Management
References:
Bromiley, M. (2016). Incident Response Capabilities in 2016: The 2016 SANS Incident
Response Survey. SANS Institute, June.
Carver, M., DiValentin, L. W., Lefebvre, M. L., Hovor, E., & Rozmiarek, D. W. (2016). U.S.
Patent No. 9,386,041. Washington, DC: U.S. Patent and Trademark Office.
Tanguy, L., Tulechki, N., Urieli, A., Hermann, E., & Raynal, C. (2016). Natural language
processing for aviation safety reports: from classification to interactive
analysis. Computers in Industry, 78, 80-95.