More Related Content
More from trevor501353 (20)
Recently uploaded (20)
![Traktor Pro Crack + License Key Free Download [2025]](https://cdn.slidesharecdn.com/ss_thumbnails/generalsciencenotes-250303184328-484ccf79-thumbnail.jpg?width=560&fit=bounds)
![GetData Graph Digitizer With Crack Free Download [Latest]](https://cdn.slidesharecdn.com/ss_thumbnails/mcqsbestgkwithfaisal-250228143540-407a79de-thumbnail.jpg?width=560&fit=bounds)
IH - Fit to ISP and IPP - Module 3 Powerpoint Presentation.pptx
- 1. American Security and Privacy, LLC Incident Handler Certification Dr. Kevin F. Streff Founder and Managing Partner 1 Incident Handler Certification
- 2. American Security and Privacy, LLC Incident Handler Certification American Security and Privacy, LLC Incident Handler Certification Dr. Kevin Streff American Security and Privacy, LLC Founder & Managing Partner www.americansecurityandprivacy.com Kevin.Streff@americansecurityandprivacy.com 605.270.4427 2
- 3. American Security and Privacy, LLC Incident Handler Certification American Security and Privacy, LLC Incident Handler Certification Agenda 3 Module 1 Incident Response Overview Module 2 Incident Response Laws and Regulations Module 3 The Fit of Incident Response in Information Security and Privacy Programs Module 4 Privacy Incidents Module 5 Security Incidents Module 6 Incident Response Program Overview Module 7 Step 1 - Preparation Module 8 Step 2 - Detection and Analysis Module 9 Step 3 - Contain, Eradicate, and Recover Module 10 Step 4 - Post Incident Activity Module 11 Incident Response Testing Module 12 Third Party Incident Response Requirements Module 13 Incident Response Auditing Module 14 Incident Response Metrics
- 4. American Security and Privacy, LLC Incident Handler Certification Module 3 THE ROLE OF INCIDENT MANAGEMENT IN INFORMATION SECURITY AND PRIVACY PROGRAMS 4
- 5. American Security and Privacy, LLC Incident Handler Certification American Security and Privacy, LLC Incident Handler Certification Gramm- Leach-Bliley Act of 1999 Required financial institutions to implement an Information Security Program 5
- 6. American Security and Privacy, LLC Incident Handler Certification American Security and Privacy, LLC Incident Handler Certification Leading Security Frameworks 1.NIST Security Framework 2.OASIS Security Framework 3.APEC Security Framework 4.Nymity Security Management Accountability Framework 5.HITRUST Security Framework 6.American Security and Privacy Information Security Framework 7.ISO 2700x Framework 6
- 7. American Security and Privacy, LLC Incident Handler Certification Information Security Program Blueprint Inventories Policies Procedures Standards Guidelines Plans Audit/Test Results Reports SARS Meeting Minutes Committee Approvals Previous Exams Awareness/Training Materials Third Party Reports Network Diagram Organizational Chart Process Flows Incident Reports Strategies Budgets Memos FI Processes Documentation Asset Mgmt. Physical Security Business Continuity Incident Response Developme nt & Acquisition Operations Security Risk Mgmt. Network Security Auditing Functions Personnel Security Reporting Remediation Assessment Changes Audit Recommendations Exam Findings Incident Reports Policy Changes Board Committee Operations Third Party Examiner FI and Technology Strategy ASP ISP v1.1 IT Audit Soc. Eng. Pen Test Scans Third Party Mgmt. Soft. Dev. Customer Employee Third Parties Systems Inventory Technology BIA AUP Roles & Resp. BCP Pandemic Preparedness 7
- 8. American Security and Privacy, LLC Incident Handler Certification American Security and Privacy, LLC Incident Handler Certification CFPB 1033 Required financial institutions to implement an Information Privacy Program Supports the Open Banking concept Requires for security and privacy 8
- 9. American Security and Privacy, LLC Incident Handler Certification American Security and Privacy, LLC Incident Handler Certification Leading Privacy Frameworks 1. NIST Privacy Framework 2. American Security and Privacy (ASP) Information Privacy Framework (IPP) 3. ISO Privacy Framework (27701) 9
- 10. American Security and Privacy, LLC Incident Handler Certification Data Mgmt Consent Mgmt Vendor Mgmt DSAR Mgmt Web Tracing & Cookie Mgmt Privacy Program Mgmt Privacy Engineering Emergency Mgmt. Information Privacy Program Blueprint Assessments Compliance Reporting Remediation Inventories Policies Procedures Standards Guidelines Plans Audit/Test Results Reports SARS Meeting Minutes Committee Approvals Previous Exams Awareness/ Training Materials Vendor Reports Network Diagram Organizational Chart Process Flows Incident Reports Data Flows Privacy Audit Consent Mgmt Audit Id Mgmt Audit Cookie Tracking Audit Website Tracking Audit Data Masking Audit Pseudonymity Audit Privacy/PIA Cookie Tracking Website Tracking Data Masking Pseudonymity Assessment Changes Compliance Recommendations Exam Findings Regulatory Changes Legal Changes Board Committees Operations Vendor Examiner Strategies/ Budgets Training Logs Memos DSARS ROPAS Data Mappings Functions Processes Documentation Privacy Notices Awareness & Training Mgmt ETC. User Mgmt 10
- 11. American Security and Privacy, LLC Incident Handler Certification American Security and Privacy, LLC Incident Handler Certification Summary Need both an Information Security Program (ISP) and Information Privacy Program (IPP) which include Incident Management 11
- 12. American Security and Privacy, LLC Incident Handler Certification American Security and Privacy, LLC Incident Handler Certification Dr. Kevin Streff American Security and Privacy, LLC Founder & Managing Partner www.americansecurityandprivacy.com Kevin.Streff@americansecurityandprivacy.com 605.270.4427 12 American Security and Privacy, LLC