Name
Strayer University
Cybersecurity Incident Response Plan (CIRP)
CIS 359 – Disaster Recovery Management
Assignment 7: Cybersecurity Incident Response Plan (CIRP)
Due Week 7 and worth 75 points
Imagine you are the Chief Information Security Officer (CISO) for a large multinational
corporation.
Your organization has experienced an increase in cyber threats and incidents, and there is a
growing
concern about the security of sensitive data. Your task is to develop a comprehensive
Cybersecurity
Incident Response Plan (CIRP) to address these challenges.
Write a paper in which you:
1. CIRP Team Roles and Responsibilities: Detail the roles and responsibilities of the key
personnel
involved in the CIRP, including the CISO, Incident Response Team (IRT) members, and
communication coordinators. Explain how these roles collaborate to ensure an effective
response to cybersecurity incidents.
2. Incident Classification and Escalation: Describe the process for classifying and escalating
cybersecurity incidents within the CIRP. Explain the criteria used to determine the severity of an
incident and the appropriate response measures.
3. Incident Detection and Reporting: Outline the procedures for detecting and reporting
cybersecurity incidents within the organization. Explain how employees and system monitoring
tools play a role in incident detection.
4. Incident Response Procedures: Provide an overview of the incident response procedures that
will be followed when a cybersecurity incident occurs. Describe the steps involved in containing,
eradicating, and recovering from incidents.
5. Communication and Notification: Explain how communication and notification will be handled
during a cybersecurity incident. Describe the internal and external stakeholders who need to be
informed and the methods of communication to be used.
6. Lessons Learned and Continuous Improvement: Discuss the importance of conducting post-
incident reviews and lessons learned sessions. Explain how the findings from these reviews will
be used to improve the CIRP and enhance cybersecurity practices.
7. Executive Summary: Draft an executive summary of the CIRP. Explain the purpose of the
plan, its
critical role in protecting the organization, and provide a high-level overview of the key
components.
References: Use at least three (3) quality resources to support your CIRP. Ensure that your
sources are
reputable and relevant to cybersecurity incident response best practices.
Your assignment must follow these formatting requirements:
Be typed, double-spaced, using Times New Roman font (size 12), with one-inch margins on all
sides;
citations and references must follow APA or school-specific format. Check with your professor
for any
additional instructions.
Include a cover page containing the title of the assignment, your name, the professor's
name, the course
title, and the date. The cover page and the reference page are not included in the required
assignment
page length.
Use appropriate headings and subheadings to organize the content.
Include any necessary diagrams or flowcharts to illustrate key processes within the CIRP.
Ensure that
these diagrams are imported into the Word document before submission.
The specific course learning outcomes associated with this assignment are:
Develop a comprehensive Cybersecurity Incident Response Plan (CIRP) for an organization.
Analyze the roles and responsibilities of key personnel in the CIRP process.
Evaluate the importance of communication and continuous improvement in incident response.
Use technology and information resources to research issues in cybersecurity incident
response.
Write clearly and concisely about cybersecurity incident response topics using proper writing
mechanics
and technical style conventions.
Grading for this assignment will be based on answer quality, logic / organization of the paper,
and
language and writing skills, using the following rubric.
Imagine you are the Chief Information Security Officer (CISO) for a large multinational
corporation.
Grading for this assignment will be based on answer quality, logic / organization of the paper, and
language and writing skills, using the following rubric.
Points: 75 Assignment 7: Cybersecurity Incident Response Plan (CIRP)
Criteria
Unacceptable
Below 60% F
Meets
Minimum
Expectation
s
60-69% D
Fair
70-79% C
Proficient
80-89% B
Exemplary
90-100% A
1. Detail the DR team
roles, responsibilities,
and sub teams that
would be implemented
and construct an
organizational chart for
the team through the
use of graphical tools
in Visio, or an open
source alternative such
as Dia.
Did not submit or
incompletely
detailed the DR
team roles,
responsibilities,
and sub teams
that would be
implemented and
did not submit or
incompletely
constructed an
Insufficiently
detailed the DR
team roles,
responsibilities,
and sub teams
that would be
implemented
and
insufficiently
constructed an
organizational
Partially
detailed the DR
team roles,
responsibilities,
and sub teams
that would be
implemented
and partially
constructed an
