Table of Contents: Introduction

Download 244.94 Kb.

1 2 3 4 5 6 7 8 9

First Cloud Security Incident Response Plan V1

Cloud Security Incident Response Plan

Table of Contents:

Introduction
- 1.1 Purpose
- 1.2 Scope
- 1.3 Objectives
Incident Response Team
- 2.1 Team Members
- 2.2 Roles and Responsibilities
- 2.3 Contact Information
Incident Classification and Escalation
- 3.1 Incident Categories
- 3.2 Severity Levels
- 3.3 Escalation Procedures
Detection and Analysis
- 4.1 Detection Tools and Mechanisms
- 4.2 Initial Analysis Steps
- 4.3 Documentation of Findings
Incident Containment and Eradication
- 5.1 Isolation Procedures
- 5.2 Eradication Procedures
- 5.3 Communication During Containment
Evidence Collection
- 6.1 Collection Tools and Procedures
- 6.2 Chain of Custody
Communication Plan
- 7.1 Internal Communication
- 7.2 External Communication
- 7.3 Communication Templates
Legal and Regulatory Compliance
- 8.1 Reporting Requirements
- 8.2 Legal Support Contacts
- 8.3 Preservation of Evidence
Resolution and Recovery
- 9.1 System Recovery Procedures
- 9.2 Post-Incident Review
- 9.3 Lessons Learned
Training and Awareness

1 2 3 4 5 6 7 8 9