Module Questions 12
1. What are the four main phases of the PICERL incident response lifecycle? (Preparation, Detection & Analysis, Containment, Eradication & Recovery, Post-Incident Activity).
Answer :
The PICERL framework (often simplified into four main phases by NIST) manages a cyber attack from start to finish. The Preparation phase involves creating policies and training teams before an attack happens. Detection & Analysis is the process of identifying a threat and determining its severity. Containment, Eradication & Recovery focuses on stopping the attack from spreading (Containment), removing the root cause (Eradication), and restoring systems to normal operation (Recovery). Finally, Post-Incident Activity (Lessons Learned) is where the team analyzes what happened to improve future defenses.
2. Why is it critical to have a communication plan ready before a data breach occurs? Who should be notified?
Answer :
Having a Communication Plan ready before a breach occurs is critical because it prevents panic, ensures consistent messaging, and protects the company’s reputation. In the middle of a crisis, a business shouldn’t be deciding “who to call.” Key parties to be notified include internal IT teams, legal counsel, executive leadership, and—depending on the severity, affected customers, law enforcement, and regulatory bodies (like the Ministry of Communication and Informatics in Indonesia). Clear communication maintains stakeholder trust and ensures the business complies with data breach notification laws.
3. What is the purpose of a Business Continuity Plan (BCP)?
Answer :
The purpose of a Business Continuity Plan (BCP) is to ensure that essential business functions can continue operating during and after a significant disruption, such as a cyber attack, natural disaster, or system failure. While a “Disaster Recovery Plan” focuses on fixing the IT systems, the BCP focuses on the entire business operations, such as how employees will work remotely or how customer service will handle inquiries if the main website is down. A strong BCP minimizes financial loss and ensures the business remains resilient in the face of unexpected crises.
Status: 100% terpenuhi
Keterangan: Sudah mengerjakan dengan baik dan benar.