On the Alert: Crafting an Effective Incident Response Plan (IRP)

Why Should You Attend:

How your business responds to a security incident can have a profound effect on the ability to recover from an attack and prevent a future occurrence. Stemming from fiduciary responsibilities, an IT leader’s due-care drives appropriate information security due-diligence activities. Administrative due-care redresses activity responsibility, whereby due-diligence includes continuously promoting compliance. Interpretively, an organization’s information systems should represent resources committed to collecting data, processing transactions, and communicating operational results within defined legal limits. Consequently, an enterprise’s management must ensure the exercise of due-diligence by all individuals involved in the development as well as the deployment of information systems.

An incident can be any event which is not part of standard information technology (IT) operations that causes or may cause an interruption to or a reduction in agreed-upon quality of service. Incidents -- whether caused by malware, spyware, or defects -- are a common occurrence requiring appropriate resolution to reinstate acceptable operational levels. Since there is an expectation of timely corrective action when an incident occurs, user orientation is critical for maintaining precipitations of an efficient and effective IT service desk. Therefore, entities should establish formal IT incident response mechanisms as well as ensure IT users are aware of established arrangements and how to utilize them.

This presentation will provide you with valuable insights into building a dynamic and agile IR program. In this Incident Response Webinar, information systems management expert Dr. Robert E. Davis, CISA, CICA will advise users on how a well-designed, pressure-tested Incident Response Plan can save your organization from significant financial, reputational, and regulatory issues.

Areas Covered in the Webinar:

• Summary of the current data privacy and security landscape
• Understanding data breach response
• Critical components of Cyber Incident Response Plans
• Building an effective internal Incident Response Team
• Communications development before and during an incident
• Recommendations on analyzing your solution providers plan
• How a Cyber Incident Response Plan differs from a Disaster Recovery Plan
• Challenge of incident response in today’s volatile threat landscape
• Key elements of data breach prevention and response
• Integrating Incident Response into security operations and development operations
• Required people, processes, and technologies

Who Will Benefit:

• Payment professionals
• Accountant
• Operations personnel
• Vendor Managers
• Disaster Recovery professionals
• Call center personnel
• Incident response team members
• Information security analyst
• Chief Security Officer
• Risk Manager
• Chief Information Officer
• Chief Operations Officer
• Information Security Manager
• Chief Executive Officer
• Chief Financial Officer
• Technology Manager

Robert E. Davis
Professor, Temple and West Chester University

Dr. Robert E. Davis obtained a Bachelor of Business Administration in Accounting and Business Law, a Master of Business Administration in Management Information Systems, and a Doctor of Business Administration in Information Systems Management from Temple, West Chester, and Walden University; respectively. Moreover, during his twenty years of involvement in education, Dr. Davis acquired Postgraduate and Professional Technical licenses in Computer Science and Computer Systems Technology.

Dr. Davis also obtained the Certified Information Systems Auditor (CISA) certificate — after passing the 1988 Information Systems Audit and Control Association’s rigorous three hundred and fifty multiple-choice questions examination; and was conferred the Certified Internal Controls Auditor (CICA) certificate by the Institute for Internal Controls.

Since starting his career as an information system auditor, Robert has provided data security consulting and IS auditing services to corporations as well as other organizations; in staff through management positions. Before engaging in the practice of IS auditing and information security consulting; Robert (as a corporate employee) provided inventory as well as general accounting services to Philip Morris, USA, and general accounting services to Philadelphia National Bank (Wells Fargo). Furthermore, he has prior experience as a freelance writer of IT audit and information security training material.

Dr. Davis received recognition as an accomplished, energetic auditor, author, and speaker with a sound mix of experience and skills in monitoring and evaluating controls. Based on his accomplishments, Temple University's Fox School of Business and Management Alumni Newsletter, as well as The Institute for Internal Controls e-newsletter featured Dr. Davis. Furthermore, he is an Advisory Board Member of The Institute for Internal Controls, the first and inaugural Temple University CISA in Residence and a founding Temple University Master of Science in IT Auditing and Cyber-Security Advisory Councilmen. Last, he accepted invitations to join Delta Mu Delta International Honor Society, the Golden Key International Honour Society, the Thomson Reuters' Expert Witness List, the IT Governance LTD expert panel, as well as the International Association of IT Governance Standards honorary membership group.

Follow us :