Writing Assignment: Module 05 Real-World

Question 1

Use the Web to search for “incident response training.” Look through the first five results and identify one or two companies that offer such training. Pick one company and look at the course offerings. Locate a course that can train you to create a CSIRT. How many days will that course take?

Answer 1

https://www.sans.org/cyber-security-courses/advanced-incident-response-threat-hunting-training/
In Person (6 days)

Question 2

Use the Web to search for “incident response template.” Look through the first five results and choose one for further investigation. Take a look at it and determine if you think it would be useful to an organization that is creating a CSIRT. Why or why not?

Answer 2

https://www.bluevoyant.com/knowledge-center/top-8-incident-response-plan-templates#:~:text=An%20incident%20response%20plan%20template%20is%20a%20comprehensive%20checklist%20of,impact%2C%20and%20control%20the%20damage.

https://www.cynet.com/incident-response/incident-response-plan-template/

both of these’s compines have muliple templats, for finding one that could suit a CSIRT for any compine and heaving them be usefeull and helpfull could be more posible the more option they have.

Question 3

Use the Web to search for “best practices for creating a CSIRT.” Pick three of the resources you discover and find the two practices that are common to all three lists. What are they?

Answer 3

1.Build a friendly team
2.Recruit an effective advocate or executive sponsor
3.Define key roles and recruit from across the organization