Use NIST Special Publication (SP) 800-34 and NIST Special Publication (SP) 800-53 for the Risk Assessment...

Transcribed Image Text:

Use NIST Special Publication (SP) 800-34 and NIST Special Publication (SP) 800-53 for the Risk Assessment framework. NIST SP 800-34 outlines in Chapter 3 Table 3-6 ISCP TT&E Activities. Here is the table: Table 3-6: ISCP TT&E Activities TT&E Event ISCP Training (CP-3) Instruction (CP-3) Contingency Plan Test /Exercise (CP-4) Tabletop Exercise (CP-4) Sample Activity A seminar and/or briefing used to familiarize personnel with the overall ISCP purpose, phases, activities, and roles and responsibilities. Instruction of contingency personnel on their roles and responsibilities within the ISCP and includes refresher training. (For a high-impact system, incorporate simulated events.) FIPS 199 Availability Security Objective Low Impact = Yes Mod. Impact = Yes High Impact = Yes Discussion-based simulation of an emergency situation in an informal, stress- free environment; designed to elicit constructive scenario-based discussions for an examination of the existing ISCP and individual state of preparedness. Low Impact = Yes Mod. Impact = Yes High Impact = Yes Test and/or exercise the contingency plan Low Impact = Yes to determine effectiveness and the organization's readiness. This could include planned and unplanned maintenance activities Mod. Impact = Yes High Impact = Yes Low Impact = Yes Using the same table with three columns (3), briefly research an organization you work at or are affiliated with like MNSU. Detail realistic TT&E events at the organization in column one, explain the sample activity in column two, and place the impact level using FIPS 199 in the last column. Add at least four (4) rows of TT&E events. Use NIST Special Publication (SP) 800-34 and NIST Special Publication (SP) 800-53 for the Risk Assessment framework. NIST SP 800-34 outlines in Chapter 3 Table 3-6 ISCP TT&E Activities. Here is the table: Table 3-6: ISCP TT&E Activities TT&E Event ISCP Training (CP-3) Instruction (CP-3) Contingency Plan Test /Exercise (CP-4) Tabletop Exercise (CP-4) Sample Activity A seminar and/or briefing used to familiarize personnel with the overall ISCP purpose, phases, activities, and roles and responsibilities. Instruction of contingency personnel on their roles and responsibilities within the ISCP and includes refresher training. (For a high-impact system, incorporate simulated events.) FIPS 199 Availability Security Objective Low Impact = Yes Mod. Impact = Yes High Impact = Yes Discussion-based simulation of an emergency situation in an informal, stress- free environment; designed to elicit constructive scenario-based discussions for an examination of the existing ISCP and individual state of preparedness. Low Impact = Yes Mod. Impact = Yes High Impact = Yes Test and/or exercise the contingency plan Low Impact = Yes to determine effectiveness and the organization's readiness. This could include planned and unplanned maintenance activities Mod. Impact = Yes High Impact = Yes Low Impact = Yes Using the same table with three columns (3), briefly research an organization you work at or are affiliated with like MNSU. Detail realistic TT&E events at the organization in column one, explain the sample activity in column two, and place the impact level using FIPS 199 in the last column. Add at least four (4) rows of TT&E events.

Answer rating: 100% (QA)

Here is an example of a table with TTE events sample activities and impact levels for an organizatio... View the full answer