Gem Infosys Incident-Response Policy - Coursework Example

Gem Infosys Incident-response policyIntroduction Gem Infosys company need to put in place necessary incident-response plan in order to prevent future network breakdowns. The I.T department should have an incident response plan so that they can successfully respond to any future incidents of network breakdown. This may be done via a number of ways such as: reducing the number of systems severity, integrating the activities of Computer Security Incident Response Team (CSIRT), damage control, and having a well-defined incident response plan (Obaidat & Boudriga, 2007).

Formulate an incident-response policy to reduce network down in Gem Infosys Company A well-defined incident response plan for Gem Infosys Company should have the following policies. The first is the initial evaluation/assesm1ent.This entails determining whether an incident exists or not so that appropriate response established. The second policies involve defining the communication channel that will be followed to inform the leaders that an incident has identified. The third policy is risk/damage minimization.

This is where the risk of self replicating warms may be minimized by making sure that the workstation are disconnected from the hub to prevent further replication of warms. The fourth policy involve determining the severity of the warms attack as well as exact point of origin where those warms are coming from so that they can be contained. The fifth policy entails protecting the other systems against the identified security threats to avoid further losses. System security against warms may be enhanced by installing firewalls as well as transmitting organization data via secured networks.

The sixth policy involves system recovery. This is where; the data and information that was damage through network breakdowns may be recovered using special software’s such as Acronis. The seventh policy involves assessing the cost and damages caused by the incident for proper responses. Lastly but is updating the policies on regular basis so that they remain relevant to organization needs (Shimonski, 2003). Conclusion In order to prevent future net work breakdowns, Gem Infosys should carry out the following activities namely: reduce the number of systems severity, integrate the activities of Computer Security Incident Response Team (CSIRT), damage control, and having a well-defined incident response plan.

The Computer Security Incident Response Team (CSIRT) should formulate and monitor the incident response plan. This plan should contain the policies such as; evaluation, communication, risk minimization, severity of warms attack, protection, recovery, assessment, and regular system updating policies. ReferencesObaidat, M. S., & Boudriga, N. A. (2007). Security of e-systems and computer networks. Cambridge [u.a.: Cambridge Univ. Press.Shimonski.J.R. (2003). Make an Incident Response Plan.Retrieved:on 14.06.2014.