[aawonder@yahoo.com]

I am trying to create an IT Incident response plan for a non profit org with virtually no in house server workload and all critical applications hosted on different SaaS providers’ infrastructure. I wonder if anyone has the experience on how to approach this. Thanks for your input.

Topic

[Stilllearning]

https://www.us-cert.gov/resources/communications
Hello – DHS Cybersecurity and Infrastructure Security Agency website provides multiple resources and information to support the development of cybersecurity plans, including self-assessment tools related to cyber risk analysis. This may be a good starting point for you,

[Wannaknow]

Hi There, Cyber security seems to be an ever more complex quagmire. Prevention seems to be the name of the game. NIST. has some good frameworks to self assess you risk. Maybe, if you can nail down the nature of your risks you can create an IT incident response plan for your organisation. Thos would need to address your businesses operational risk; the legal and regulatory risk you are challenged with and finally the impact on your reputaiton.

[baronvonhoss]

Hey wonder,

the incident response plan doesn’t have to be a technical document it can be about how your organisation responds to an incident when notified by your 3rd party providers. Generally this would cover:

-Methods of notification (how will you be notified if an incident occurs)
-Roles and responsibilities (who will be notified, what are their responsibilities within the incident management construct)
-Tiers of Incident (are there different responses for different incidents types or scales. this may loop back to roles and responsibilities)
-Timings and communications (outline the time requirements, teir 1 must be notified within hours, teir 2 with 24hrs, etc. Then consideration to any variance in reporting in different notification periods noting that some offices don’t have 24hr presence.
-finally, consider putting it in an easy to follow decision tree flow chart.

[Author]

Replies