Minimum 5 pages of content, exclusive of cover and reference pages.

· Please don't exceed 7 pages of content. Succinct writing is generally preferred in business.

· Follow formal APA format. Include Cover and citations, just ignore them for the page count.

· Use good business style. Be succinct, direct, and understandable.

· Remember that your audience (the board of directors) is NOT technically savvy.

· You must include the appropriate citations, including your textbook if referenced. I expect a minimum of at least 3 citations, but use as many as appropriate. If you are referring to or recommending particular standards or guidelines, please provide a citation for them as well.

http://portlandtribune.com/pt/9-news/258508-129948-health-co-op-says-laptop-with-sensitive-information-was-stolen; http://www.bizjournals.com/portland/blog/health-care-inc/2015/04/oregons-health-co-op-stolen-laptop-leads-to.html;

these links are provided to me about the incidents

You are the CISO (and Incident Response manager) for this organization. Your task is to prepare a detailed brief for your organization's board of directors, describing & discussing:

· What happened.

· The impact of what happened.

· Why it happened.

· The likelihood of it happening again

· What must be done to prevent it from happening again. (Remediation plan)

Consider the incident from the context of this course and text.

Apply the concepts and tools discussed in the text, and create a useful OUTLINE of a remediation plan.

Some ideas you may want to consider while you work on this:

· What policy failures/gaps may have led to the incident?

· What can be done to prevent a recurrence? (note: is it preventable?)

· What is the impact, short and long term to :

· Customers
· Employees
· The public
· Stockholders/Stakeholders?

· Is this impact financial, reputational/trust, inconvenience?

· What is the likely cost in $?

· What (if anything) went wrong during the initial response to the incident?

· Are there any deep organizational problems that led to the incident occurring?

· Were there organizational maturity issues that contributed to the likelihood of, or affected the effectiveness of the response to the incident?

· What mitigation strategies can help?