Please enable JavaScript.

Coggle requires JavaScript to display documents.

SETA, Governance + Contingency Planning (Governance (:check: for…

- - - - organisations goals
      - Accountability
      - Feedback
    - - 5 steps considered at depth
        
        incident management
        
        removable media controls
        
        user education and awareness
        
        home and mobile working
        
        risk management regime
      - 5 partially considered
        
        network security
        
        managing user privileges
        
        secure configuration
        
        Malware prevention
        
        Monitoring
- - - - key personal needs to be notified
      - Incident properly documented
  - - - attack success scenario developmeny
      - potential damage assessment
      - Business unit analysis
      - subordinate plan classification
      - threat attack identification and prioritazation
  - - - Incident response planning (IRP)
        
        the immediate response
      - disaster recovery planning (DRP)
        
        focus on restoring system after a disaster
        
        process
        
        Provides detailed guidelines for the recovery steps
        
        the roles and responsibilities of the DR team
        
        The key person to notify
        
        prioritise
        
        details in documenting disaster
      - Business continuity planning (BCP)
        
        selecting a continuity strategy
        
        occurs concurrently with the DRP when damage is major
        
        and integrating off site data storage and recovery functions into this strategy
    - - Champion
        
        high-level manager support
      - Project manager
        
        leads the project
      - Team members
        
        should be the managers of theri representitives
    - - Table top exercise
        
        based on simulation
        
        involves a realistic scenario
        
        cheap to run
      - Live exercise
        
        live rehearsal for implementing a plan
        
        mainly used for
        
        communications
        
        logistics
        
        physical capabilities
        
        testing
        
        expensive to set up
        
        provides experimental learning
      - Discussion-based exercise
        
        cheap to run
        
        Easy to prepare
        
        can be used at the policy formation stage 2 finalise plan