IT Examiner School, Palm Springs, CA

Incident Response Plan - Components

Communication  Paths – Employees  and Customers

Senior Leadership  Involvement

Responsibilities  and Duties

Recovery  Strategies: Critical  Systems, Apps, and  Data 

Process to Classify,  Log, and Track  Incidents

Escalation  Procedures

Response and  Recovery

Address Incidents  at Third‐Parties

Periodic Testing

Tabletop Exercise!

1. What activities must be executed to resolve this incident?  2. Identify the roles/teams that will be involved during this  incident?  3. Identify the plans and procedures that should be used during  this incident?  4. What pieces of information are key to resolve this event? 5. Other concerns?