Policy 7230A - Department of Administration

8. Incident Response
These Incident Response Mandatory Baselines support the Enterprise Security Policy (ITEC
7230 Rev 1), the Computer Incident Response Policy (ITEC 7320) and the IT Security
Response Protocols (ITEC 7320A).
Mandatory
Non-Mandatory
Procedures Baselines Procedures Baselines
8. Incident Response
8.1. Incident Response
8.1.1. Build a Team and Provide Training (4 sets) (4 sets)
8.1.2. Build an Incident Response Capability (4 sets) (5 sets)
8.1.3. Test the Plan (3 sets) (2 sets)
8.1.4. Operate the Plan (5 sets) (3 sets)
8.2. Maintain Records
8.1. Incident Response
The following are the Mandatory Baselines that support the Incident Response section
of the Default Security Requirements:
8.1.1. Build a Team and Provide Training
No applicable Mandatory Baselines.
8.1.2. Build an Incident Response Capability
No applicable Mandatory Baselines.
8.1.3. Test the Plan
No applicable Mandatory Baselines.
8.1.4. Operate the Plan
Must a potential threat be detected it must be analyzed to determine if an
incident has occurred and then the plan must be executed to minimize the
harm inflicted by the incident:
8.1.4.a Threat Categorization Scheme
Please see 7320A IT, Security Response Protocol, for detailed information.
o .
8.1.4.b Threat Prioritization Schedule
Please see 7320A IT, Security Response Protocol, for detailed information.
.
8.1.4.c Threat Response Schedule
Please see 7320A IT, Security Response Protocol, for detailed information
Mandatory Baselines
Page 15 of 25