UNIT 12 IT TECHNICAL SUPPORT AND MANAGEMENT

Adam Noor NC 12480 ASSIGNMENTS 3 Form 2 Swara UNIT 12 IT TECHNICAL SUPPORT AND MANAGEMENT P5 Produce an IT support and management support that adequately meets most of the client’s requirements. A sufficient incident response plan offers a course of action for all significant incidents. Some incidents lead to massive network or data breaches that can impact the organization for days or even months. When a significant disruption occurs, your organization needs a thorough, detailed incident response plan to help IT staff stop, contain, and control the incident quickly. For physical disruptors, such as natural disasters and flooding. Incident recovery team An incident recovery team is the group of people assigned to implement the incident response plan. Generally, these are members of the IT staff who collect, preserve, and analyze incident-related data. Your IT staff may need to work with lawyers and communications experts to make sure that legal obligations are met. Why do the organization need an incident response plan? If your network hasn’t been threatened yet, it will be. If it has, then you know the chaos that can follow a cyber attack. Whether a threat is virtual (security breaches) or physical (power outages or natural disasters), losing data or functionality can be crippling. An incident response plan and a disaster recovery plan help you mitigate risk and prepare for a range of events. How can the organization be sure the network is ready for a disaster? The network will never be 100 percent secure, so you must prepare both your network and your employees for crises to come. In addition to an incident response plan, you need a thorough disaster recovery plan that can mitigate the damage caused by a disaster. Are there tools that help automate an incident response plan? Cisco Umbrella Investigate helps to automate many of the most common steps in an incident response. Investigate's rich threat intelligence adds the security context needed to uncover and predict threats. Follow the five steps below to maintain business continuity. How to create an incident response plan 1.Determine the critical components of the network To protect your network and data against major damage, you need to replicate and store your data in a remote location. Because business networks are expansive and complex, you should determine your most crucial data and systems. Prioritize their backup, and note their locations. These actions will help you recover your network quickly. 2. Identify single points of failure in the network and address them Just as you should back up your data, you should have a plan B for every critical component of your network, including hardware, software, and staff roles. Single points of failure can expose your network when an incident strikes. Address them with redundancies or software failover features. Do the same with your staff. If a designated employee can’t respond to an incident, name a second person who can take over. By having backups and fail-safes in place, you can keep incident response and operations in progress while limiting damage and disruption to your network and your business." 3. Create a workforce continuity plan During a security breach or a natural disaster, some locations or processes may be inaccessible. In either case, the top priority is employee safety. Help ensure their safety and limit business downtime by enabling them to work remotely. Build out infrastructure with technologies such as virtual private networks (VPNs) and secure web gateways to support workforce communication. 4. Create an incident response plan Draw up a formal incident response plan, and make sure that everyone, at all levels in the company, understands their roles. An incident response plan often includes: • A list of roles and responsibilities for the incident response team members. • A business continuity plan. • A summary of the tools, technologies, and physical resources that must be in place. • A list of critical network and data recovery processes. • Communications, both internal and external. 5. Training the staff on incident response Only IT may need to fully understand the incident response plan. But it is crucial that everyone in your organization understands the importance of the plan. After you’ve created it, educate your staff about incident response. Full employee cooperation with IT can reduce the length of disruptions. In addition, understanding basic security concepts can limit the chances of a significant breach. Disaster recovery is an organization’s method of regaining access and functionality to its IT infrastructure after events like a natural disaster and cyber attack A variety of disaster recovery (DR) methods can be part of a disaster recovery plan.