Incident Response Plan

    Create an Incident Response Plan, determine the results for Final Security Review, and plan periodic security reviews for the organization’s system.  Determine how and when it is safe to retire a system and how to apply the procedures of SSD to the organization’s SDLC.  Identify the parts of a program for information and security awareness and use the security goals of the organization to develop a personnel training and education program.  Determine measurements that can be used for creating and ensuring a security policy, decide how and when police need to be a part of an organization’s security issue, and decide what to document during and after an attack.