Task
Security Incident Case Study Information
The following information is provided to allow you to investigate a specific set of circumstancesmaround a recent incident in a corporate network and should be used in conjunction with detailed information provided for the Cyberattack on the next page.
Background
You are an IT Security Consultant who has been engaged by an Allied Health and Medical clinic to review their systems, processes and procedures after a cybersecurity attack.
Within this context, as an IT Security Consultant, you must perform two core functions.
1. Oversee the review of the IT operations of the clinics security solutions to determine what can be done to prevent future attacks of this kind.
2. Establishing a security stance through policy, architecture, and training processes.
During discussions with the board of management you discover the company has no documented DR/BCP plan, no formal Incident Response Team, or Incident Response Plan, and very little documentation of the current system, other than the overview Network Diagram included in this document. There is also no knowledge of the typical performance characteristics of the network or systems and the general security culture & awareness of staff is poor.
Read less