Please enable JavaScript.

Coggle requires JavaScript to display documents.

Incident Response (Disaster Recovery (DRP) and Business Continuity (BCP) …

- - - - Incident Preparation
        
        Establish an approach to handling incidents
        
        Establish a policy and warning banners to deter intruders and allow information collection :red_flag:
        
        Establish a communication plan with stakeholders :silhouettes:
        
        Develop incident reporting criteria :pen:
        
        Develop a process to activate the incident management team :construction_worker:
        
        Establish a secure location to execute the IR plan :globe_with_meridians:
        
        Ensure availability of needed equipment :compression:
    - - Identify Incident
        
        Assign ownership to incident handler
        
        Verify report or events qualifying as incidents
        
        Establish Chain of Custody
        
        Determine incident severity
    - - Containment
        
        Incident Containment
        
        Obtain agreement on actions taken that may affect availability
        
        Get IT representative and relevant virtual team members to implement procedure
        
        Obtain, preserve evidence
        
        Document actions
        
        Control, manage communication to the public
        
        Activate incident/response team, notify appropriate stakeholder
      - Eradication
        
        Cause Eradicate
        
        Locate most recent version of backup/alt solution
        
        Remove root cause
        
        Improve defences by implementing protection techniques
        
        Perform vulnerability analysis
        
        Determine signs and cause
      - Recovery
        
        Incident Recovery
        
        Verify action taken were successful
        
        Involve system owners in testing the system
        
        Aid system owners declare normal operation
        
        Restore operation to normal
    - - Lessons Learned
        
        Analyse issues encountered during incident response efforts
        
        Propose improvements
        
        Present report to stakeholders