BD308 Assignment 12- amelia nurul mupty-2581499006

The PICERL Incident Response Lifecycle

The PICERL framework provides a structured approach to managing cyberattacks. It begins with Preparation, where organizations build their defenses and train response teams. Detection & Analysis follows, focusing on identifying suspicious activity and assessing the scope of the threat. The core technical response involves Containment, Eradication, & Recovery, which aims to stop the spread, remove the threat’s root cause, and restore systems to normal operations. Finally, Post-Incident Activity involves reviewing the incident to document lessons learned and strengthen future security measures.

Importance of a Communication Plan

Having a communication plan ready before a breach occurs is critical for maintaining stakeholder trust and minimizing reputational or legal damage. A pre-defined plan ensures that information is shared accurately and consistently, preventing panic and disorganized responses. Key parties to be notified include internal leadership, legal counsel, regulatory bodies, impacted customers, and public relations teams to manage the media narrative effectively.

Purpose of a Business Continuity Plan (BCP)

The primary purpose of a Business Continuity Plan (BCP) is to ensure that critical business functions can continue to operate, or be recovered quickly, during and after a major disruption or disaster. Unlike a disaster recovery plan which focuses specifically on IT, a BCP takes a holistic approach to keep the entire organization functional, ensuring it can still meet its obligations to clients and regulators even under emergency conditions.

Keterangan: Telah dikerjakan sebaik mungkin.