Description
Instructions:
1) Make sure you have carefully read Chapters 11 & 12 in your text.
2) Begin by reading the following scenario:
You work for a large, private health care organization that has server, mainframe, and RSA user access. Sean, your manager, has been asked to provide the latest version of the organization’s incident response policy. To his knowledge, no policy exists. He has asked you to research and create an incident response policy over the weekend.
Assignment Requirements
Look for at least two incident response policies for organizations of a similar type to your organization. In addition, download NIST “Computer Security Incident Handling Guide, rev 2” SP800-61 located at http://csrc.nist.gov/publications/nistpubs/800-61r....
Based on your research, create an initial draft of an incident response policy for your organization. Consider HIPAA and other health care–related compliance requirements. Create a summary report that justifies the content you included in the draft policy. Reference your research so that Sean may add or refine this report before submission to senior management.
Submission Requirements
- Format: Use Microsoft Word to compile your report.
- Font: Arial or Times New Roman, 12-Point, Double-Space
- Citation Style: APA
- Number of Citations: At least 2 (your textbook can count as a resource)
- Length: 1-2 pages
Explanation & Answer
Hello, the incident Response Policy paper is ready. See attachment
Incident Response Plan
Prepared by:
For: Sean (Manager)
Purpose
The purpose of this response plan is to ensure that IT related incidents are reported in a
timely manner and addressed accordingly. The response policy outlines the procedure that
should be followed in reporting any identified incidence of concern.
Scope
This policy applies to all users of the healthcare facility. This includes employees and all
relevant stakeholders. The users will be required to report actual and suspected IT incidents. The
response policy will cover all IT incidents relating to the healthcare server, mainframe, RSA user
access and the entire ICT system.
Incident reporting process
Step 1: Contacting the IT help Desk
Any user who notices an IT incident is required to contact the IT help desk. The IT desk
representative will then log the details of the caller, time, nature of incidence, location and type
of equipment involved and how the incident was discovered.
Step 2: IT representative contacts response team
The IT help desk will contact the response team from the stored list of personnel. The
help desk representative ...
Review
Review
