Overview
Consider the following situation:
A wave of spear-phishing emails arrive target employees at
your organization. You respond by alerting employees of the emails within a few hours of the
first report and you believe the organization was not seriously affected. However, three days
later an employee reports that the organizations main data servers have been frozen, locked
and encrypted, and a ransomware email arrives asking for $15,000 in bitcoin to unlock the
serves. If you do not respond within 24 hours, the email threatens to permanently erase the
data.
The Assignment:
Your individual writeup should include your description of how your organization would respond
to this situation, following the organization’sincident management plan (homework #4). There is
no page limit, but an appropriate writeup could be done in 2-3 pages.
Among the elements you should include in your write-up:What steps were taken in advance that helped prepare for this particular incident?Using your incident management plan, what steps be taken to respond to this situation
after the fact, including reporting damage mitigation, investigation, and short?term and
long?term follow?up to the situation.If there are actions that you realize you should take that are not in the incident
management plan that you developed for homework 4, note this and explain what those
actions might be