Incident Response and Business Continuity Plan.docx DFC 640 Incident Response and Busi

Incident Response and Business Continuity Plan.docx    DFC 640  Incident Response and Business Continuity Plan  University of Maryland “ Global Campus DFC 640: Advanced Forensics   Executive Summary  This report will outline a comprehensive incident response and business continuity plan for GCU. This report will define relevant organizational policies and procedures, provide a response readiness plan, and provide a forensic response and investigation plan. It will develop and expound on techniques to ensure preparedness to handle future network intrusions. GCU would like to make sure they have a solid set of policies, procedures, and metrics in place related to cybersecurity. This report will define the following policies: Dynamic Vulnerability Assessment, Intrusion and Prevention Detection Systems, and Incident Response. The policy components will incorporate essential characteristics of each area in quantifiable terms, in addition to the role a variety of technologies play in executing the policy and procedure strategy. The response readiness plan will provide a guide for GCU to follow so that it is prepared to conduct a digital forensic investigation in the event of a security breach. It will address the conditions for a forensic investigation in a security breach while maintaining business continuity and return to business as usual within GCU. The forensic response and investigation plan will apply best practices in digital forensics to guide the GCU leadership in effectively responding to a future incident.  Table of Conte