9.3: Hands-on Activity

Last updated
Save as PDF

Page ID: 4376

\( \newcommand{\vecs}[1]{\overset { \scriptstyle \rightharpoonup} {\mathbf{#1}} } \) \( \newcommand{\vecd}[1]{\overset{-\!-\!\rightharpoonup}{\vphantom{a}\smash {#1}}} \)\(\newcommand{\id}{\mathrm{id}}\) \( \newcommand{\Span}{\mathrm{span}}\) \( \newcommand{\kernel}{\mathrm{null}\,}\) \( \newcommand{\range}{\mathrm{range}\,}\) \( \newcommand{\RealPart}{\mathrm{Re}}\) \( \newcommand{\ImaginaryPart}{\mathrm{Im}}\) \( \newcommand{\Argument}{\mathrm{Arg}}\) \( \newcommand{\norm}[1]{\| #1 \|}\) \( \newcommand{\inner}[2]{\langle #1, #2 \rangle}\) \( \newcommand{\Span}{\mathrm{span}}\) \(\newcommand{\id}{\mathrm{id}}\) \( \newcommand{\Span}{\mathrm{span}}\) \( \newcommand{\kernel}{\mathrm{null}\,}\) \( \newcommand{\range}{\mathrm{range}\,}\) \( \newcommand{\RealPart}{\mathrm{Re}}\) \( \newcommand{\ImaginaryPart}{\mathrm{Im}}\) \( \newcommand{\Argument}{\mathrm{Arg}}\) \( \newcommand{\norm}[1]{\| #1 \|}\) \( \newcommand{\inner}[2]{\langle #1, #2 \rangle}\) \( \newcommand{\Span}{\mathrm{span}}\)\(\newcommand{\AA}{\unicode[.8,0]{x212B}}\)

Overview

Students review one NIST case study, either the Olympic Pipeline Explosion or the Maroochy Water Services Incident. They indicate the response steps and describe what went wrong.

Hands-on Activity Objectives

Identify the 14 response core capabilities covered in the National Response Framework.
List some of common types of incidents that may occur in SCADA/ICS systems.
Identify the phases of an Incident Response, as described in NIST SP 800-61.
Explain the components of an Incident Response Plan.

Assignment

Download one of the two NIST case studies below.

[embeddoc url=”http://textbooks.whatcom.edu/phil101...-Explosion.pdf” download=”all” text=”Download Olympic Pipeline Explosion”]

“Pipeline Rupture and Subsequent Fire in Bellingham, Washington June 10 1999.” NTSB/PAR-02/02. PB2002-916502. National Transportation Safety Board.

[embeddoc url=”http://textbooks.whatcom.edu/phil101...udy_report.pdf” download=”all” text=”Download Maroochy Water Services”]

This document can also be downloaded from the Internet: https://www.mitre.org/publications/technical-papers/malicious-control-system-cyber-security-attack-case-study-maroochy-water-services-australia.

Review and assess the case you selected.

Write a short paper describing the response steps and what went wrong in the case study you read.

Grading Criteria Rubric

Content
References
Use of American Psychological Association (APA) style in writing the assignment

Grade Points: 100