IR Planning with the FEMA NIMS Framework

Our incident response plan went from ad hoc heroic efforts of individuals to a well defined, and unfortunately well used, incident response plan. Our response procedures were established and repeatable but lacking structure, modularity, and flexibility. This presentation will discuss the maturation of our incident response plan from early efforts to its current format with components from the National Incident Management System developed by FEMA. This framework will scale for incident response of all types for all size institutions.

Outcomes: Learn what FEMA NIMS is and how to apply it to your IR planning * Learn how one IR plan can apply to all information security events * Understand the importance of reviewing and revising your IR plan regularly