You are the ciso (and incident response manager) for this organization. Your task is to prepare a detailed brief for your organization’s board of directors, describing & discussing: • what happened.

• The impact of what happened.

• Why it happened.

• The likelihood of it happening again

• what must be done to prevent it from happening again. (Remediation plan) consider the incident from the context of this course and text. Apply the concepts and tools discussed in the text, and create a useful outline of a remediation plan. Some ideas you may want to consider while you work on this:

• what policy failures/gaps may have led to the incident?

• What can be done to prevent a recurrence?

• What is the impact, short and long term to:

• customers

• employees

• the public

• stockholders/stakeholders?

• is this impact financial, reputational/trust, inconvenience?

• What is the likely cost in $?

• What (if anything) went wrong during the initial response to the incident?

• are there any deep organizational problems that led to the incident occurring?

• were there organizational maturity issues that contributed to the likelihood of, or affected the effectiveness of the response to the incident?

• What mitigation strategies can help?

Answer rating: 100% (QA)

On February 2 2015 the Sacred Heart health center received information from one of its business associates that an email belonging to one of its employees had been hacked in to and its username and pa... View the full answer