Cyber Incident After Action Report Template
Because no one knows when an incident might occur every company needs to have this document.
Cyber incident after action report template. After action report released for cdot cyber incident despite immediate action by the colorado department of transportation cdot and governors office of internet technology oit cdot suffered a second attack on march 1 2018. After action report 1. Approved for public release. Belfastmetacuk data breach incident response plan is a free word template designed to provide framework for reporting and managing data security breaches affecting personal or sensitive data held with the institute or organization.
Duration of site. Base name air force base state country etc memorandum for. After action report released for cdot cyber incident. From the executive summary.
An aar template is included as attachment 19. Guide to test training and exercise programs for it plans and capabilities reports on computer systems technology the information technology laboratory itl at the national institute of standards and technology nist promotes the us. An incident action plan abbreviated as iap gives you a clear road map on how to respond to a situation. Despite immediate action by the colorado department of transportation cdot and governors office of internet technology oit cdot suffered.
This after action report is prepared iaw xxxx. The after action reportimprovement plan aarip aligns exercise objectives with preparedness doctrine to include the national preparedness goal and related frameworks and guidance. The following is information regarding the contingency itself. Department of the xxxxx.
Cyber storm cs the departments capstone national level cyber exercise series provides the framework for the most extensive government sponsored cybersecurity exercises of its kind. The plan outlines all actions that you should take to prevent loss of data before during and immediately after a data breach incident. Exercise information required for preparedness reporting and trend analysis is included. After action report sample.
Economy and public welfare by providing technical leadership for the nations. Users are encouraged to add additional sections as needed to support their. It is recommended that an after action report aar be completed after any major incidents within your area. Cyber exercise playbook the views opinions andor findings contained in this report are those of the mitre corporation and should not be construed as an official government position policy or decision unless designated by other documentation.
Between february 21 23 2018 a threat actor executed a ransomware attack on that ultimately affected roughly half of the departments computers.