Reference no: EM133309551

1. What type of team/staffing model could be adopted at Acme based on the given information? Why?

2. Assume that the Acme Corporation had a comprehensive set of incident response procedures. What procedure would apply to the incident described above? Why?

3. Think about the external entities that Acme should contact about the incident. Identify one entity and provide your justification. Identify one external entity that should not be contacted and provide your justification.

4. Which internal stakeholders should the CIRT contact and why?

5. After recovering from this incident, which services should the CIRT provide to Acme? Why?

6. Acme had not made preparations for cyber incidents, including this incident. Identify two preparation actions that could have prevented or mitigated the effects of this incident and provide your justification.

7. What was the attack vector for this incident?

8. What were the early warning signs and indicators of the incident?

9. Identify two criteria for determining the appropriate strategy that should be adopted in the containment phase and provide your justification.

10. Identify two types of post-incident activities that should be performed and provide your justification.