Module 9: Incident Response

Module 9 Hands-on Activity

Overview

Students review one NIST case study, either the Olympic Pipeline Explosion or the Maroochy Water Services Incident. They indicate the response steps and describe what went wrong.

Objectives

Module 9 Learning Objective # Revised Bloom’s Taxonomy Hands-On Activity Objectives
9.2 Understand Identify the phases of an Incident Response (IR), as described in the NIST SP 800-61.
9.3 Understand Identify incident containment and describe how it is applied to an incident.

Assignment

Download one of the two NIST case studies below.

  1. “Pipeline Rupture and Subsequent Fire in Bellingham, Washington June 10 1999 [PDF].”  NTSB/PAR-02/02. PB2002-916502. National Transportation Safety Board.
  2. “Malicious Control System Cyber Security Attack Case Study: Maroochy Water Services, Australia [PDF]“.  By Marshall Abrams and Joe Weiss. Aug 1, 2008. Mitre New & Insights blog.

Review and assess the case you selected.

Write a short paper describing the response steps, identifying the phases in the incident response, and discuss what went wrong.

Grading Criteria Rubric

  • Content
  • References
  • Use of American Psychological Association (APA) style in writing the assignment

Grade Points: 100

License

Icon for the Creative Commons Attribution 4.0 International License

Critical Infrastructure Systems by NCyTE Center is licensed under a Creative Commons Attribution 4.0 International License, except where otherwise noted.

Share This Book