[CDP-development] Action Items - Incident Response Guide and Plan Samples

[ALBIN Cinnamon S * DAS]

Hi Everyone,
Here are a few of the action item deliverables from our meeting. We appreciate everyone's willingness to share. What works for one may not work for another but we hope by sharing different perspectives we all gain insight into the complexity we face.

First, attached is the Incident Response quick guide Nancy discussed.

Second,  CSS has developed an Incident Response Plan for state small boards and commissions who don't have one, see attached. This plan is state centric and contains details that may not be applicable to many; however, it can provide a starting point.

Additional Resources:


*       A compilation of information security resources available to local governments in Washington State, including MRSC's Information Security Assessment Tool, along with examples of cybersecurity RFPshttps://mrsc.org/Home/Explore-Topics/Public-Safety/Cybersecurity/Cybersecurity-Resources-for-Local-Governments.aspx#Plans%20and%20Procedures.

*       NIST SP 800-61R2 (Computer Security Incident Handling Guide), to be familiar with the larger concepts and idea. Even though the plan is large, you can modify to meet your needs.

Hope these are useful,

[cid:image001.png at 01D5751C.F5818D60]

Cinnamon Albin
Cyber Security
Enterprise Information Services
Cyber Security Services (CSS)
Desk: (503)373-1496
Cell: (971)707-1966
"Ensuring user-friendly, reliable and secure state technology systems that serve Oregonians."


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20211011/3666d5bb/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 21907 bytes
Desc: image001.png
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20211011/3666d5bb/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 1_Incident Response.docx
Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document
Size: 15563 bytes
Desc: 1_Incident Response.docx
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20211011/3666d5bb/attachment-0002.docx>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: SBC IR Plan.docx
Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document
Size: 20722 bytes
Desc: SBC IR Plan.docx
URL: <https://omls.oregon.gov/pipermail/cdp-development/attachments/20211011/3666d5bb/attachment-0003.docx>