Skip to main content
Workforce LibreTexts

9.1: Description and Objectives

  • Page ID
    4374
  • \( \newcommand{\vecs}[1]{\overset { \scriptstyle \rightharpoonup} {\mathbf{#1}} } \) \( \newcommand{\vecd}[1]{\overset{-\!-\!\rightharpoonup}{\vphantom{a}\smash {#1}}} \)\(\newcommand{\id}{\mathrm{id}}\) \( \newcommand{\Span}{\mathrm{span}}\) \( \newcommand{\kernel}{\mathrm{null}\,}\) \( \newcommand{\range}{\mathrm{range}\,}\) \( \newcommand{\RealPart}{\mathrm{Re}}\) \( \newcommand{\ImaginaryPart}{\mathrm{Im}}\) \( \newcommand{\Argument}{\mathrm{Arg}}\) \( \newcommand{\norm}[1]{\| #1 \|}\) \( \newcommand{\inner}[2]{\langle #1, #2 \rangle}\) \( \newcommand{\Span}{\mathrm{span}}\) \(\newcommand{\id}{\mathrm{id}}\) \( \newcommand{\Span}{\mathrm{span}}\) \( \newcommand{\kernel}{\mathrm{null}\,}\) \( \newcommand{\range}{\mathrm{range}\,}\) \( \newcommand{\RealPart}{\mathrm{Re}}\) \( \newcommand{\ImaginaryPart}{\mathrm{Im}}\) \( \newcommand{\Argument}{\mathrm{Arg}}\) \( \newcommand{\norm}[1]{\| #1 \|}\) \( \newcommand{\inner}[2]{\langle #1, #2 \rangle}\) \( \newcommand{\Span}{\mathrm{span}}\)

    Description

    Students learn about Incident Response (IR) strategies, including prevention and containment. They also learn how to create an Incident Response Plan.

     

     

    Objectives

    • List some common types of incidents that may occur in SCADA/ICS systems.
    • Identify the phases of an Incident Response (IR), as described in the NIST SP 800-61.
    • Define incident containment and describe how it is applied to an incident.
    • Discuss the IR reaction strategies unique to each category of incident.
    • Explain the components of an Incident Response Plan.
    • Identify the 14 response core capabilities covered in the National Response Framework.

     


    9.1: Description and Objectives is shared under a CC BY license and was authored, remixed, and/or curated by LibreTexts.

    • Was this article helpful?