Scenario
The investigation of the incident in the Bismarck office is concluding, and the damage to the companys reputation, productivity, and bottom line are still being computed. Members of senior management have reviewed your technical report and are seeking recommendations to prevent similar compromises from occurring. As a senior security manager in charge of handling Dynamicos first major computer network security incident, you have personally witnessed the events that affected the Bismarck office and participated in the restoration efforts. Part of your duties is contributing your experiences to the organizations body of knowledge so that appropriate preventative measures can be implemented.
Assignment
Create a remediation plan for Dynamico that addresses the eradication strategy. Specifically address the structure and composition of the remediation team, and their high-level actions and timing required. Make strategic recommendations and document any suggestions for improvement (e.g., lessons learned). Clearly state your assumptions and justify the purpose of all of your requirements. Executive management will review the plan, evaluating and prioritizing your recommendations for implementation. Therefore, keep your plan clear and concise (i.e., 2-3 pages of substance; references not included). Propose the resources that could potentially be required, in order to inform management for the decisions that will be required to efficiently allocate resources. Include appropriate citations for external references.
