Assignment 1: Preventative Maintenance and Response

Companies often do not see the value in disaster planning or incidence recovery planning, until after they have suffered a disaster and experienced the business revenue loss and public relations issues that ensue. IT personnel often try to help managers see the value in preventative maintenance and testing contingency plans, but budget restraints and a "we-are-not-a-target" attitude often prevent this from actually occurring.

In this module, you have read that the costs of eDiscovery in a postmortem are incredibly expensive, often far exceeding years of planning and testing and saving the company the public relations distress related to the original incident. In your readings this week, you will read about the first things to do when an incident takes place.

Submission Details:

I need minimum of 250 words, post to the Discussion Area your responses to the following:

Explain what is required immediately after an incident is reported or believed to be occurring. What forms of investigation take place once the immediate breach or hole is plugged?

How can IT workers find out what happened? What tools are available to them to investigate the issue and be sure it does not recur?

Compare and contrast eDiscovery with a postmortem. How are they different? Provide at least one example. You may take help of the suggested readings this week to help address this question.

Your response should rely upon at least two sources from professional

literature-articles from peer-reviewed journals and relevant textbooks. Write in a clear, concise, and organized manner; demonstrate ethical scholarship in accurate representation and attribution of sources (i.e., APA format); and use accurate spelling, grammar, and punctuation.