Upload File

5. rlll'ollt da 111 november .. 1994(1) the effectiveness of the original incident response...

  • Home
  • Documents
  • 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
34
I I ! TECHNICAL REPORT STANDARD TITLE PAGE I. RFRT NO. .. nu • WA-RD 366.1 4. SUB EVALUATION AND APPLICATION OF WASGTON STATE'S CE RESPONSE GE 7. A lOS) Fred Mannering, Ji Kœhne 9. G OKOI Washington State Transpoaon Center (AC) University of Washington, JD-10 University Disct Building; 1107 NE 45th St, Suite 535 Seattle, Washingn 98105-4631 Washington State Depent of Tstion Transpoaon Building, MS 7370 Olympia, Washington 985$-7370 IS. SY N 3. _,,NO. 5. Ú o November 1c4 .. 0 ··-·· .. . 0 . ---� "• NO. 10 wv UNr . NO. 11. VAl-flU. Aeement Z3, Task 20 U. I lU U Final technical po 14. SnO A This study was conducd in cꝏpaon with e U.S. pnt of Transportaon, Fedel Highway Adminisation. 16. ABS The pose of the project was to (1) -evaluate the effecveness, appropriateness, and at of the Incint Respoe Gui cuntly u in the Northwest Region, and (2) provide e Nohwest, Olympic, Southwest, and Easte Regions with elecnic versions of an Incident Response Guide r them to complete with their own inaon and keep uat. In-depth inteiews we conducted with the Nohwest Region's Incident Resnse Team (IRT) personnel, who e cuntly ulizing the Incint Respoe Gui. An evaluaon of the Northwest Region's Incint Respoe Guide indicated the llowing. (1) The effectiveness of the original Incident Response Gui, Field Reference, was minimal r field response personnel at the scene of an incident; aining and experience proved more useful than dumentaon. (2) e oginal Incint Response Gui, Office Reference, proved more effective and appropriate as a refence r inisve and new IRT pernnel. (3) The at and organization of the original Incident Response Guide were inapppriate r use by administrators and new personnel. (4) As the IRT pam has evolv, a numr of prus, resoues, and contacts have changed; the eleconic at of the updated Incident Response Guide will help cilitate these updates. The mificaon of the Northwest Region's Incint Response Gui r use in other WSDOT regions pved to a simple step in ensuring consistency in incident response proams statewide r the llowing reasons. (1) Much of the required background inrmation and recommended IRT procedures a the same statewide. (2) The impetus r developing a al outline of incident sponse predures, equipment, and urces is minimiz when all the requirements e specified in a fill-in-the-blank at. Incident Management, Incident Response, Incident No rescons. is dument is available to the Respon Teams, Incident Resnse Guide, public thugh the Naonal Thnical Ination Incident Response Tining Sice, Singfield, VA 22616 19. SBUJKU, SS. ( None I 7 UII -••\ܒ) None 21. NO. , 35

Upload: others

Post on 31-May-2020

1 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;

I I

p!I !

TECHNICAL REPORT STANDARD TITLE PAGE I. RF.PORT NO. .. nu •

WA-RD 366.1

4. 11TL8 AND SUBTrlLB

EVALUATION AND APPLICATION OF WASHINGTON STATE'S INCIDENT RESPONSE GUIDE

7. AIJll lOR(S)

Fred Mannering, Jodi Koehne

9. PERFORMING OKOANUAIIVn

Washington State Transportation Center (TRAC) University of Washington, JD-10 University District Building; 1107 NE 45th Street, Suite 535 Seattle, Washington 98105-4631

Washington State Department of Transportation Transportation Building, MS 7370 Olympia, Washington 98504-7370

IS. SIJPl'LllMBNTARY N0111S

3. _._..,,....,.,NO.

5. Rlll'OllT DA 111

November 1994 .. 0 ··-··...,.,.,

.. . 0 . ---� ......-""'• NO.

10. wvRK UNr . NO.

11. VA\Jftl'U'll-flU.

Agreement T9903, Task 20

U. I Yl'I! OI' IUll"UIU ""U

Final technical report

14. SPOn""""'O AOl!NCY <X>DB

This study was conducted in cooperation with the U.S. Department of Transportation, Federal Highway Administration. 16. ABSTRACT

The purpose of the project was to (1) re-evaluate the effectiveness, appropriateness, and format of the Incident Response Guide currently used in the Northwest Region, and (2) provide the Northwest, Olympic, Southwest, and Eastern Regions with electronic versions of an Incident Response Guide for them to complete with their own information and keep updated.

In-depth interviews were conducted with the Northwest Region's Incident Response Team (IRT) personnel, who are currently utilizing the Incident Response Guide.

An evaluation of the Northwest Region's Incident Response Guide indicated the following. (1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident; training and experience proved more useful than documentation. (2) The original Incident Response Guide, Office Reference, proved more effective and appropriate as a reference for administrative and new IRT personnel. (3) The format and organization of the original Incident Response Guide were inappropriate for use by administrators and new personnel. (4) As the IRT program has evolved, a number of procedures, resources, and contacts have changed; the electronic format of the updated Incident Response Guide will help facilitate these updates.

The modification of the Northwest Region's Incident Response Guide for use in other WSDOT regions proved to be a simple step in ensuring consistency in incident response programs statewide for the following reasons. (1) Much of the required background information and recommended IRT procedures are the same statewide. (2) The impetus for developing a formal outline of incident response procedures, equipment, and resources is minimized when all the requirements are specified in a fill-in-the-blank format.

Incident Management, Incident Response, Incident No restrictions. This document is available to the Response Teams, Incident Response Guide, public through the National Technical Information Incident Response Training Service, Springfield, VA 22616

19. SBUJKU, aASSII'. (ua .... iepmt)

None I 7.IJ. ,,_UIUII -••\U11810pop)

None 21. NO. ur ,-,.OBS

35

Page 2: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 3: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 4: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 5: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 6: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 7: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 8: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 9: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 10: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 11: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 12: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 13: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 14: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 15: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 16: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 17: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 18: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 19: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 20: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 21: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 22: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 23: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 24: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 25: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 26: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 27: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 28: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 29: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 30: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 31: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 32: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 33: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;
Page 34: 5. Rlll'OllT DA 111 November .. 1994(1) The effectiveness of the original Incident Response Guide, Field Reference, was minimal for field response personnel at the scene of an incident;

Incident Response: Tunnelling

Data Breach IncIDent response plan toolkIt · Incident Response Team 3 Incident Response Contact Sheet 4 Suspecting or Detecting an Incident 5 Incident Response Discovery Form 6 Incident

Incident Response Preparedness: Best Practices - lba.org Crocker - Incident Response - Are... · Sr. Incident Response Consultant, Incident Response & Digital Forensics . SecureWorks

Business Resilience & Incident Response Are You Ready? · Resilience & Incident Response ... Business Resilience & Incident Response ... Business Resilience & Incident Response Are

Incident Totals Incident Type Response per District

California-Joint Cyber Incident Response Guide Cyber Incident...Feb 27, 2018  · Incident Response Lifecycle A security incident response capability will be developed and implemented

Professional incident response

PROTECT SOLAR ASSETS WITH INCIDENT RESPONSE...INCIDENT RESPONSE: HOW IT WORKS Pre-event baseline Using a combination of aerial and in-field analysis, we provide a baseline snapshot

Be Prepared: Incident Response and Business Continuity ... · Incident Response and Business Continuity —What These Are Incident response management Ensure proper management response

Incident Response and Forensic Prepardness - ACUIA.org - Incident Response... · Incident Response and Forensic Preparedness ... and intrusion detection and antivirus products

Anti Incident Response

Lesson 11 Basics of Incident Response. UTSA IS 3523 ID and Incident Response Overview Hacker Lexicon Incident Response

Enterprise Incident Response - Cisco · Enterprise Incident Response: ... Case Study 2: Removable Media. ... • Full-scope incident response, analysis, and investigation

LCG Incident Response

1. Incident Response System Modelling...2 1. Incident Response System Modelling The Incident Response (IR) subsystem is responsible for handling any incident message and providing

RSA Incident Response: Emerging Threat Profile€¦ · RSA Incident Response incident response RSA Incident Response: Emerging Threat Profile . Shell_Crew . January 2014

Incident response cloud

Communication Strategies for Incident Response - · PDF fileEffective incident response requires more than notification technologies. Real-time collaboration among incident response

TRAUMATIC INCIDENT RESPONSE PROGRAM …Traumatic Incident Response Program Manual March 2014 2 SECU State Employees' Credit Union TIR Traumatic Incident Response TIRC Traumatic Incident

Digital Forensics, Incident Response, and Cloud Computing · Digital Forensics, Incident Response, and Cloud ... •Cloud-ready incident response and forensics: ... forensics-incident-response-summit-jesse-kornblum-computer

Multi-Casualty Incident Response Plan › files › 210_MCI.pdfCoordinate communication between response agencies if requested. 3.2 FIELD OPERATIONS Incident Command The Fire agency

POLLUTION INCIDENT RESPONSE MANAGEMENT PLAN FOR …danielsinternational.com.au/.../pollution-incident-response-plan.pdf · CONFIDENTIAL & PROPRIETARY | POLLUTION INCIDENT RESPONSE

INCIDENT RESPONSE ACTIVITY - ICS-CERT · 2017-01-09 · INCIDENT RESPONSE ACTIVITY. INDUSTRIAL CONTROL SYSTEMS. CYBER EMERGENCY RESPONSE TEAM. INCIDENT RESPONSE ACTIVITY. SITUATIONAL

Lesson 5 Introduction to Incident Response. UTSA IS 6353 Incident Response Overview Hacker Lexicon Incident Response

How to Response Against Web Security Incident...Agenda Incident Response Life Cycle Recap Incident Response Web Hacking PlayBook Incident Response Step for Web Hacking Security Incident

CrowdStrike Services CROWDSTRIKE INCIDENT RESPONSE AND PROACTIVE …€¦ · CrowdStrike Incident Response & Proactive Services. 01 AM I BREACHED? INCIDENT RESPONSE The CrowdStrike

Incident Response

Incident Response Plan - Spearstonespearstone.com/resources/Breach_Response_Plan_by_AICPA.pdf · 4 Table of Contents Incident Response Plan 6 Incident Response Team 6 Incident Response

Don’t Panic! Case Studies of Incident Response from the Field

Incident Response Incident Response Process Forensics

Cyber incident response - KPMG · the incident response programme. Incident response programme development • Assistance in creation of an incident response programme, process design

Incident response: Introduction

Lesson 6 Basics of Incident Response. UTSA IS 6353 Security Incident Response Overview Hacker Lexicon Incident Response

Exam information - Universitetet i oslo · Incident response is a reaction to unexpected events. Incident response shall reduce negative consequences of an incident. As incident response

Improving Incident Response Incident Response Agenda Why Incident Response is Important Threats, Numbers, Traditional Response What is an Incident