Recovery Phase. 1. Of the routine health department services disrupted as a result of the incident (independent of those electively stood down), which ones were restored and/or modified? [Select all that apply] Questions 1a and 1b are repeatable for each service.
Recovery Phase. 2.4.1 Short Term Recovery
Recovery Phase. AWS assigns responsibility to the appropriate teams to take steps to restore normal system functionality or stabilize the affected Services.
Recovery Phase. After completing the Readjustment Phase, and for the duration of your stay in the Recovery Phase (up to about 18 months), you will be expected to be checked in no later than 10:30pm each night. If you are not in by that time, you will be deemed to have made the choice to leave the program and your belongings will be packed up and given to charity. Overnight or weekend passes will be considered with pre-authorized approval of the Program Manager. Application for a weekend pass must be submitted no later than Friday by noon. In any of the program phases, if you need a curfew extension to be attending a support group, meeting with sponsor/mentor, or to attend to critical family matters, application must be made in advance and an extension will be provided for up to no later than 11:00pm. Otherwise, an overnight pass must be secured, and will be dependent on your good standing in the program.
Recovery Phase. 5.5.1. Recovery Maintenance
Recovery Phase. The Contractor shall provide post-test support, IAW the applicable TAR, to include such actions as:
Recovery Phase. The relevant resolvers will perform break fix to address the incident. Once troubleshooting, break fix, and affected components are addressed, the call leader will assign next steps in terms of follow -up documentation and follow-up actions and end the call engagement.
Recovery Phase. The Recovery Phase represents IT’s effort to restore the affected environment back to normal operation after security vulnerabilities have been remediated. Post-Incident Remediation Once an incident has been recovered from, the SIRT team will ensure applicable audit trails and the related evidence are collected into a centralized location. The driving factors that determine the applicable information that is needed, and direction of this task is the following: ● Is the information essential for internal problem analysis? ● Could the information be used as forensic evidence in relation to a potential breach of contract or regulatory requirement, or in the event of civil or criminal proceedings? ● Could the information be used as leverage for negotiating for compensation from software and service suppliers. If an answer the above questions was YES, then that information will be collected and categorized. Additionally, the post-incident remediation phase represents the review of the security incident by the SIRT to determine the following: ● What additional actions (if any) need to be taken. ● If breach notification is required (see Breach Management policy/procedure). ● Review incident and if applicable, breach related documentation to ensure that it is complete. ● Whether there are any recurring or high-impact incidents and any improvements to the existing incident response process that need to be implemented. ● Prepare formal communication or arrange a meeting with senior leadership to brief them on the outcome of the incident. ● Close the security incident. After the final resolution of incidents, the SIRT team will ensure lessons learned are incorporated into the incident response policy and procedures, training, and testing exercises. Security assessments will be used against all incidents or on a sample of incidents, to further validate the effectiveness (or expose weakness) of the established controls within the incident response program and the related risk assessment that led to them.
Recovery Phase. The Recovery Phase represents IT’s effort to restore the affected environment back to normal operation after security vulnerabilities have been remediated. Post-Incident Remediation Once an incident has been recovered from the SIRT team will ensure applicable audit trails and the related evidence are collected into a centralized location. The driving factors that determine the applicable information that is needed, and direction of this task is the following:
