Once again, you work for a 60-employee company that performs forensic investigations of employees’ use of company equipment (usually computers and mobile devices). The company has seven different U.S. federal agencies as its only clients and generally works directly with its human resources department. Many of these agencies must complete annual risk assessments of their IT infrastructure and will investigate random employees every year. They will also investigate employees who they think might be misusing organizational resources. You work in the IT department with three other individuals (IT department head, hardware specialist, and software specialist). You mainly work on risk assessments and educating the company employees on how to keep the IT systems safe. You also serve as the incident response manager.
The federal government has just notified your company that there was a major hack of many computer systems of the U.S. federal government through a . Unfortunately, a backdoor was inserted into the SolarWindows supply chain software that your organization was required to utilize by your clients. You know that software is on at least some of your organizations computers.
You have been assigned to create at least a 5-page incident report. It should include the following elements:
- Name, overview, and description of organization
- Roles and responsibilities for Organizations IT Security Group, Incident Response Manager, and Forensic Investigator Team
- Communications that need to be sent out and when (this can be internal and external communications)
- Investigation process
- Triage and mitigation process
- Recovery process
- Documentation process
- Summary
Keep in mind that this report should also serve as a portfolio piece for you.
Cite any references to support your assignment.
Format your assignment according to APA guidelines.
Submityour assignment.
Additional Resources
- by Center for Internet Security
- from the State of Louisiana
Leave a Reply
You must be logged in to post a comment.