Learning Objectives

1. Demonstrate knowledge of risk management concepts. Know how to mitigate risk through the use of controls.
2. Analyze the scenario.
3. Apply the knowledge in a scenario.

Instruction

XYZ Network Solutions provides network services and value-add communications to customers in several countries in Europe and North America.

The corporate headquarters is in Miami Florida with offices in Chicago, London, UK and Frankfurt, Germany. The company has a sales division with eight employees led by Andre Wisser, human resources with three employees led by Jane Aubin, Technical and Communications with 45 employees led by Peter ODay. Finance is led by Andrea Worth but most of the Payroll and Finance functions have been outsourced to a SaaS Cloud Provider.

7- XYZ Network Solutions has asked you to set up an incident response program that will work together with the help desk and information security department. What should be the first few steps in creating an incident response program?

8- What is the first priority and first steps to be taken when an incident is detected?

9- What is the purpose of the RTO and RPO?

10- When deciding on an IT recovery strategy what considerations should be made on whether to use a commercial hot site or internal hot site (mirror or multiple processing centers?

11- How can an organization ensure that lessons are identified following an incident and that they are carried out as lessons learned?