Module 9: Incident Response

Module 9 Team Activity

"Team" by Newtown grafitti via Flickr. CC BY 2.0.Overview

Teams select one of the risks from their risk assessment and create an Incident Response Plan for their sector-based organization.



Team Activity Objectives

• Identify the phases of an Incident Response (IR), as described in NIST SP 800-61.
• Define incident containment and describe how it is applied to an incident.
• Discuss the IR reaction strategies unique to each category of incident.


Based on your team’s investigation of your chosen sector and fictitious organization, determine which stakeholders to include. Develop a Incident Response Plan document that discusses the steps taken for one of the risks that was identified by your team’s CSET Risk Assessment in Module 7.


Assignment Options

Option 1: Write a 2-page abstract summarizing the Incident Response Plan your team has developed.

Option 2:  Prepare 2–3 presentation slides about your Incident Response Plan.


Grading Criteria Rubric

  • Content
  • Evidence of teamwork
  • References
  • Use of American Psychological Association (APA) style in writing the assignment

Grade Points: 100


Icon for the Creative Commons Attribution 4.0 International License

Critical Infrastructure Cybersecurity by Whatcom Community College and CyberWatch West is licensed under a Creative Commons Attribution 4.0 International License, except where otherwise noted.

Share This Book