Define the term incident as used in the context of IRP. How is it related to the concept of incident response? List and describe the three criteria used to determine whether an actual incident is occurring List and describe the three sets of procedures used to detect, contain, and resolve an incident. List and describe the four IR Planning steps. List and describe the actions that should be taken during an incident response. What is an alert roster? What is an alert message? Describe the two ways they can be used. List and describe several containment strategies given in the text. On which two tasks do they focus? What is an incident damage assessment? What is it used for? What criteria should be used when considering whether or not to involve law enforcement agencies during an incident? What is a disaster recovery plan, and why is it important? List and describe two rapid onset disasters. List and describe one slow onset disaster. How would you respond differently to the two types of disasters? What is a business continuity plan, and why is it important? What is a business impact analysis and what is it used for? Why should continuity plans be tested and rehearsed? Which types of organizations might use a unified continuity plan? Which types of organizations might use the various contingency planning components as separate plans? Why? Quiz Chapter 3
This is the end of the preview.
access the rest of the document.