Information systems security incident Essay Example | Topics and Well Written Essays - 2000 words

Information systems security incident - Essay Example This paper defines CONOP for ‘B Concepts’. The mission of B-Concepts CIRT is: â€Å"To protect communications and promote standards that give us a unique advantage†. To fulfill this mission the operational framework for security of the software, hardware and data associated with information systems is defined based on ISO 17799. CONOP outlines the key players, their roles and responsibilities in the event of information security incident. The CONOP is defined to control the information & financial loss, for business continuity, security policy review and security awareness program.The CIRT organization structure is detailed; roles and responsibilities of the team members are defined. CIRT acts on information & security logs to anticipate security threats and to resolve the security incidents. This paper describes the types of logs that are maintained at B-Concepts, the log management system and discusses the advantages of security logs.Three types of security logs are maintained at B-Concepts: Security process logs are records of the security procedure and security policy application. These logs are recorded in the normal condition. Security faul t logs are recorded in absence of security policy and risk management strategy. Security breach logs are the records of security policy breach. The CONcept of OPerations on information security incident is based on the severity and impact of the incident