Create an incident response plan:
Company Name: North American Lumber Coalition
Description: North American Lumber Coalition is a global company that specializes in the harvesting and
processing of lumber. They are a sustainability first company that is very concerned with responsible forest
management.
You have been hired to lead the incident response team within the Cyber Security organization at NALC. Your
first order of business is to execute planning and preparation. For this exercise limit your procedural
documentation to address a website compromise.
- Assumptions:
- Incident response policy - should include:
~ Who is responsible, accountable, consulted, and informed
~ What model will you follow for incident response
~ Who can declare an incident - Team structure and necessary relationships
~ Who will be part of the incident response team
~ Who will be part of the executive incident response team
~ What outside relationships will be needed and when - Incident response procedures for a website compromise
~ This should provide a detailed roadmap of actions the incident response team must take when handling a
website compromise
~ Should detail activities for each of the phases of incident response - Communications plan
~ How will the team communicate with each other during an incident
~ How will the team communicate with outsiders during an incident
~ Who is responsible for communicating with outside parties during an incident (customers, law enforcement,
the media, etc.)
~ When will these communications take place during the course of an investigation?