Week 6: Case Study DeVry University

Abstract Gemini Info Systems (GIS), a small software company, narrowly avoided disaster when a recent flood just missed their offices. The potential damage to GIS’s computer systems could have been catastrophic, potentially forcing the company out of business. To mitigate future risks, GIS must enhance its computer system security and develop a robust Incident-Response Policy aimed at minimizing downtime in the event of any future incidents. GIS’s current infrastructure includes a hardware firewall, ten file servers, two web servers, a network-attached storage system with 60 TB of storage, a Windows 2012 Active Directory server for user access and authentication, 45 high-quality PCs, and a broadband Internet connection.

GIS management has tasked you with drafting an Incident-Response Policy. The policy should outline the necessity of creating or updating the following components:

• Business Continuity Plan (BCP): Specify the key elements that a BCP should include.
• Disaster Recovery Plan (DRP): Identify sources or templates for developing the DRP.
• Incident-Response Team (IRT): Detail the titles and roles of team members.
• Selection of an Alternative Site as Part of the BCP: Discuss the benefits of a hot, warm, and cold site.

It’s important to remember that this policy should remain high-level, providing the authorization for the development of these plans and the formation of the IRT without getting bogged down in excessive detail.

Incident Response Policy

• Business Continuity Plan
  • Policy/Purpose/Scope
  • Goals/Objectives
  • Roles/Responsibilities
  • Business Impact Analysis
  • Risk Mitigation Plans
  • Offsite Data and Storage Requirements
  • Business Recovery and Continuity Strategies
• Disaster Recovery Plan
  • Communication Plan
  • Role Assignments
  • Equipment Planning
  • Asset Inventory
  • Vendor Communication/Service Restoration
• Incident-Response Team
  • Team Staffing
  • Plan Development

References Exabeam. (n.d.). Retrieved from https://www.exabeam.com/incident-response/csirt/