1. Analyze and assess the importance and relevance of the incident response process and how it ties into network protection and continued operation. 2. Research and analyze the tools that ran be used to assist in the incident response process. COURSE OBJECTIVES 3. Research and anal we the decisions in incident response M determine when it is appropriate to disconnect from the Internet, stay connected and monitor, or attempt to redirect the attacker for further monitoring. 4. Apply computer forensics concepts into the incident response process. Understand the importance of keeping current in the information security community as a method to protect their environment. II 1. Create a policy or procedure that addresses events such as: a disaster recovery plan, a business continuity plan, an incident response policy, an acceptable usage document, an information security policy, a physiml security policy, assessments or troubleshooting procedures. PROGRAM OBJECTIVES 2.Research, document, test and evaluate several current industry information security based threats, risks, malicious activities, covert methodology, encryption technologies, mitigation techniques or unconventional tactics to prevent loss of sensitive information and data confidentiality, integrity, and availability. 3. Articulate the complexity of and apply thinking skills M how the network and application infrastructure affects technology forensics investigations and incident response procedures.
Lets talk about things that can go wrong!
• What are some of the concerns during the incident identification and plan activation?
• What can happen when you put the wrong Command Structure or poorly define responsibilities M your incident response process?
• Research a current event, within the last year that demonstrates what can potentially occur with poorly defined incident response processes.
• Provide your analysis of the information and how it relates to the topic. Be sure to cite your sources.
