Response Readiness Plan

Words: 944
Pages: 4

Today’s organizations must have an effective response readiness plan to efficiently thwart attacks. The readiness plan should include policies that are unambiguous and organization specific. According to NIST SP 800-86, organizational policies outline guidelines, standards and procedures that are necessary to conduct forensic investigations; policies must be updated to reflect the current laws and regulations as they pertain to incident response. Moreover, the response readiness plan will help gage the effectiveness of the plan, which ensures that first responders and investigators have the most effective set of instructions to conduct investigations. In addition, the Association of Chief Police Officers (ACPO) has four principles that help …show more content…
An independent third party should be able to examine those processes and achieve the same result.” (ACPO, 2012)
• Principle 4: “The person in charge of the investigation has overall responsibility for ensuring that the law and these principles are adhered to.” (ACPO, 2012)
Response Time
A response readiness plan is a proactive approach to incident handling. The readiness plan will start with having a Business Impact Plan (BIA) that details the acceptable procedures for legally collecting evidence with the least amount of downtime to the organization. The BIA is used to determine how an incident will affect the organization from a financial standpoint as well as the impact to business’s reputation. The business impact analysis (BIA) identifies which business components and processes are essential to the survival of the organization as a whole. According to NIST SP 800-34, the BIA identifies mission critical business components and/or processes that must return to full operational status following an unexpected incident. The BIA will also identify the resources required to resume business operations (Swanson,
…show more content…
The forensic tools used to collect, analyze, and authenticate potential evidence from a crime scene should be current technology and appropriate for the crime scene (Gogolin, 2013). Therefore, forensic investigators should get some preliminary information about the crime they will be investigating to ensure the necessary tools are brought to the scene. According to Nelson, there are two types of tool kits to choose from: initial response and extensive response. A combination of both initial and extensive response tool kits is what will make up the appropriate tool kit for an enterprise level investigation. The tool kit will contain but not limited