Information Security - Transactional Enterprise Resource Planning System - Security Incident - IT Assessment Answer

IT Assessment Answer

Assessment Task:

ABC Company is a manufacturing company that produces new technology that sells online directly to customers and retailers.  The system they use is a core transactional Enterprise Resource Planning system called NEDS. NEDS is similar to many core systems that provide integrated applications on a common platform for financials, managing materials, sales distribution, and production planning (similar to Oracle or SAP).   NEDS is located in the Netherlands, while ABC Company is located in Florence, Kentucky. On June 15, 2016, James Hurd (ABC’s Global Security Director) was notified that NEDS was burglarized during business hours involving individuals stealing equipment including blackberries, iPhones, laptops and hard drives.  Local police were notified and the incident was reported on that date.  A police report only included identification of specific hardware that was stolen and several bicycles.

The burglary notification that was mailed was sent to a branch office of ABC Company in Mexico.  James Hurd was notified by the Mexico office via email which included an attached electronic version of the burglary notification and police report on June 20, 2016.  James Hurd recognized that the incident actually occurred 5 days earlier. 

The letter contained the following information about the incident:

• The incident occurred in the application area that provides custom application development and reporting for the ABC Company.  

• The area that was impacted involved “potential data” used for sales analysis.  Data from the ABC Company had been placed on laptops while some diagnostics were being carried out. 

• Compromised data could have included customer or retailer information from 2002-2014 consisting of names, address, bank account data or credit card numbers, SKU product numbers, descriptions, quantities, Purchase Order numbers, and purchase price.

You are James Hurd and need to respond to this incident by taking action immediately.  

You will need to complete the following:

1. Develop an Incident Response Policy for ABC Company that will be used as your reference for your evaluation of this potential data incident (this is an attachment that should be included in your paper and referenced in your presentation).

2. Upon developing ABC Company’s Incident Response Policy, evaluate the incident described above: 

Summarize the data incident and potential level of risk, include why? 

Upon identifying the  types of data that could potentially be impacted and what laws/regulations could be in violation of non-compliance if this data was breached

Develop your action plan to evaluate this data incident (include your rationale for why the steps were necessary)

Describe how the Incident Response Policy supported your actions 

Identify any issues that made the evaluation more difficult

Identify areas of future risk mitigation actions should a similar incident occur (look at the gaps or issues with this scenario)

This IT Assessment has been solved by our IT experts at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our experts are well trained to follow all marking rubrics & referencing style.

Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turnitin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.