Unit 5 - Incident Response

5a. - Identify basic facts and terms pertaining to the concepts of Incident Responses.

Vulnerability Reporting

Incident Response Team

Team Leader

Technical Specialist

Documentation Specialist

Legal Advisor

General Incident Response Actions

Incident Categories

Roles and Responsibilities

Reporting Requirements/Escalation

Exercise Planning

User Roles

System Behavior Deviations

Event

Incident

5b. - Identify the relationship of basic faxcts and state general pertaining to incident response techniques.

Incident Handling Process

Six Phases

1. Detection and Reporting of Events

2. Preliminary Analysis and Identification

3. Preliminary Response Actions

4. Incident Analysis

5. Response and Recovery

6. Post-Incident Analysis

5c. - Identify the relationship of basic facts and state general principles pertaining to root cause analyssis as applicable to incident response.

1. Gather Information

2. Validate the Incident

3. Determine the Operational Impact

4. Coordinate

5. Determine Reporting Requirements

Courses of Action (COA)