Incident Response Planning

LC³S develops Incident Response Plans (IRP), policy and procedures and we help establish Incident Response Teams (IRT) to respond to Information Technology (IT) security incidents. We provide high-level incident response procedures for implementation within an organization for Sensitive but Unclassified (SBU) and National Security Information (NSI) systems. The requirements of an IRP are mandatory, and are designed to standardize incident handling and reporting.

The Plan provides:

• The Requirements for Incident Response Handling
• Agency Objectives for Incident Response Handling
• The Organizational Structure for Incident Response Handling
• Roles and Responsibilities for Key Elements and Personnel
• Preparation and Training Guidelines
• Procedures for Handling Incidents on SBU IT Systems
• Procedures for Handling Classified Incidents on NSI IT Systems
• Incident Reporting Procedures