Classify each of the following occurrences as an incident or disaster. If an occurrence is a disaster, determine whether business continuity plans would be called into play. a. A hacker breaks into the company network and deletes files from a server. b. A fire breaks out in the storeroom and sets off sprinklers on that floor. Some computers are damaged, but the fire is contained. c. A tornado hits a local power station, and the company will be without power for three to five days. d. Employees go on strike, and the company could be without critical workers for weeks. e. A disgruntled employee takes a critical server home, sneaking it out after hours. For each of the scenarios (a–e), describe the steps necessary to restore operations. Indicate whether law enforcement would be involved.

Classify each of the following occurrences as an incident or disaster. If an occurrence is a disaster, determine whether business continuity plans would be called into play. a. A hacker breaks into the company network and deletes files from a server. b. A fire breaks out in the storeroom and sets off sprinklers on that floor. Some computers are damaged, but the fire is contained. c. A tornado hits a local power station, and the company will be without power for three to five days. d. Employees go on strike, and the company could be without critical workers for weeks. e. A disgruntled employee takes a critical server home, sneaking it out after hours. For each of the scenarios (a–e), describe the steps necessary to restore operations. Indicate whether law enforcement would be involved.

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter10: Planning For Contingencies

Section: Chapter Questions

Problem 1EDM

See similar textbooks

Similar questions

Which of these statements is TRUE? Question 9 options: a) b) C) d) e) ALL events MUST be logged The requirements for defining something as an event are LOW A specific incident would ONLY be associated to one event An average organization would observe SLIGHTLY more events than incidents ALL incidents are very serious and are worthy of a thorough investigation
Explain the difference between a system crash and a “disaster.”
Susan is the lead investigator for a security incident and realizes that she will not be able to complete her investigation without causing severe disruption to the business. The action she feels she must take exceedsthe authority granted to her under the incident response plan. What should Susan do? a)Shut down all business operations immediately until she develops a plan b)Take the action immediately to protect the business c)Discount the action as a possibility because it exceeds her authority d)Consult with higher levels of management
a) Which control policy is necessary for the prevention of unauthorized entry and facility damage? b) Write two examples of the controls needed to secure the facilities, offices, and rooms.
Which of the following statements are FALSE regarding the process of managing cyber security incidents? a. The containment phase is concerned with limiting the ongoing damage from the incident. b. An incident report is produced as part of the recovery phase.. c. Weaknesses that are identified as leading to d. An event must be classified as an incident before a response is mobilis
It is important to compile a list of all known hazard categories and rank them according to the frequency with which they occur, preferably with URL proof.
Risk reduction strategy(ies) is (are): Select one: a. Damage limitation b. Risk avoidance, Risk detection and removal, and Damage limitation c. Risk detection and removal d. Risk avoidance
1a. How did you found out about the incident and how did you manage to pinpointthe staff responsible for the incident? Create a fictional but reasonable scenarioto answer this question.
A. Mean time between failures is the average time it takes to repair a serviceable device True False B. Snapshot backup can either be full, incremental or differential and can complete much faster than traditional backups, but require systems and software that supports them. True False C. An incident is any meaningful change in the network’s state that is both detectable and happened at a specific time. True False
128. Blue hat is a) hacker breaks security for altruistic or at least non-malicious reasons. b) hacker of ambiguous ethics and/or borderline legality, often frankly admitted. c) someone outside computer security consulting firms that are used to bug test a system prior to its launch, looking for exploits so they can be closed. d) None of these
What exactly are some examples of situations in which overfitting could take place?
Suppose we had to put our current Yoga application into production, and despite the fact that we had installed a firewall, we had to identify three (3) significant and distinct areas in which our application and its environment were still vulnerable, and then list some possible ways in which we would have to protect those vulnerabilities. What would we do if we had to do this? Keep your writing specific, comprehensive, and critical-thinking-intensive. Consider that you're writing this for your bosses and that your job is on the line. However, keep it to three paragraphs or less. Each paragraph should include a clear list of vulnerabilities, as well as at least one mitigation for each vulnerability. Predicted word count: three well-structured yet succinct paragraphs