-: In this section of the course, 2 2
we're going to discuss how to conduct 3 3
incident response preparation. 4 4
Now, over the next few sections together, 5 5
we're going to be covering the full incident response process, 6 6
but in this section, we're really going to be diving deep 7 7
into the incident response preparation phase 8 8
by looking at domain three, incident response management, 9 9
and domain four, reporting and communication, 10 10
specifically looking at objectives 3.3 and 4.2. 11 11
Objective 3.3 states that you must be able to explain 12 12
the preparation and post-incident activity phases 13 13
of the incident management lifecycle. 14 14
As I said, though, we're really going to be focused 15 15
in this section only on the preparation phase 16 16
and this includes things like planning, training, 17 17
testing, and the documentation portions of this objective 18 18
as we start going through that preparation phase. 19 19
We'll also be looking at objective 4.2. 20 20
Objective 4.2 states that you must be able 21 21
to explain the importance of incident response 22 22
reporting and communication. 23 23
Specifically, we're going to be focused here 24 24
on the communication planning portion 25 25
of the incident response lifecycle's preparation phase. 26 26
Now, as we move throughout this section, 27 27
we're going to start with a broad look 28 28
at the incident response process 29 29
and all of the portions and phases of it. 30 30
That way, you'll have a good overview 31 31
for the next few sections of the course. 32 32
Then, we're going to dive into the concepts 33 33
covered by documenting the incident response process. 34 34
Next, we're going to be talking about 35 35
the seven types of data criticality 36 36
that you need to consider when you're developing 37 37
your incident response plans. 38 38
Then, we're going to be talking about communication plans 39 39
and reporting requirements, 40 40
because these are critical to have pre-planned 41 41
before an incident actually occurs. 42 42
Next, we're going to cover how you can best 43 43
coordinate your response efforts across your organization 44 44
and with your external stakeholders, too. 45 45
Then, we'll be discussing the of a business continuity plan 46 46
and how we use these to ensure our businesses 47 47
can continue to operate during natural disasters, 48 48
cyber attacks, and other malicious events. 49 49
After that, we're going to discuss training and testing, 50 50
as both of these are critical 51 51
to the success of any incident response. 52 52
If you are not well prepared, 53 53
your instant response is going to fail 54 54
and it's going to become even more costly 55 55
and disastrous for your organization. 56 56
So an ounce of prevention here 57 57
is going to be worth a pound of cure. 58 58
After all, these days, it's not really a matter 59 59
of if you're going to have an incident response, 60 60
it's really a matter of when. 61 61
Cyber attacks and data breaches 62 62
are increasing at an alarming rate, 63 63
and so it's really important that we are well prepared 64 64
for these things because they are going to happen 65 65
at some point in the future. 66 66
Finally, we're going to take a short quiz 67 67
to see what you learned during this section of the course 68 68
and we'll review those quiz questions 69 69
to ensure you can explain why the correct answers 70 70
were correct. 71 71
So let's start talking all about incident responses 72 72
by considering the different phases of an incident response 73 73
and then focusing in depth on the preparation phase 74 74
in this section of the course.