that entity. Due to the sensitive nature of the information contained herein, this plan is available
only to those persons who have been designated as members of one or more incident teams, or
who otherwise play a direct role in the incident response and recovery processes.
Unless otherwise instructed, each plan recipient will receive and maintain two copies of the plan,
stored as follows:
One copy at the plan recipient 's office
One copy at the plan recipient 's home
For additional copies, contact John Smith
The incident response planning effort for ACME Computers recognizes and affirms the
importance of people, processes, …show more content…
Specific details on incident response and subsequent business recovery actions and activities are
included within the respective recovery team plans.
Scope
This incident response plan includes initial actions and procedures to respond to events that
could impact critical business activities at ACME Computers. This plan is designed to minimize
the operational and financial impacts of disasters.
The ACME Computers Incident Response Plan is designed to provide an initial response to any
unplanned business interruption, such as a loss of laptops by either theft or loss, and to the
rampant security incidents. This document defines the requirements, strategies and proposed
actions needed to respond to such an event.
Planning
This plan was developed to respond to an incident that could render the ACME Computers out of
service or inaccessible. The plan is designed to respond to scenarios such as the following:
1.
Loss of Laptops Computers
2.
Loss of data communications and the network …show more content…
5. Continue to follow established emergency escalation protocols, a decision will be made
on declaring an incident.
6. IF a declaration is made, the Manager point of contact will update the Team and ACME
Computers management as soon as possible.
IR Plan
6
When the Team is notified of the event, they will immediately contact the business management
on the incident, asking them to remain on standby. The Team will report to the scene of the
event, or where directed, and coordinate additional activities with building management and the
Team. The call tree notification process begins after the authorization has been given to declare
an incident.
Declarations
The disaster declaration process at ACME Computers is as follows:
1. ONLY the management team in charge of ACME Computers has the authority to declare
an incident at ACME Computers.
2. A incident declaration at ACME Computers MUST generally meet one or more of the
following criteria:
i) The incident is a major, prolonged or indefinite disruption to business as usual.
ii) The incident is of sufficient magnitude and warrants the enacting of