CSIS-3342 Incident Response and Handling
James Wade
Credit Spring 2024
Section(s)
CSIS-3342-001 (83698)
LEC Tu 6:00pm - 8:30pm HYS HYS1 01331.00
LAB Tu 8:30pm - 9:30pm HYS HYS1 01331.00
Course Requirements
Grade Policy
Grade Scale:
90% - 100% A
80% - 89% B
70% - 79% C I don’t curve.
60% - 69% D
0% - 59% F
Basis for Grades
|
Type |
Number |
Percent Each |
Total Weight |
|
Lecture Exam |
2 Exams |
15% |
30% |
|
Chapter Quiz |
12 Chapter Quiz |
2.5% |
30% |
|
Labs |
5 Labs |
6% |
30% |
|
Attendance |
|
10% |
10% |
|
|
|
Total |
100% |
Chapter Quizzes
12 in number, over textbook chapters & instructor quizzes
2.5% of your grade, total weight 30%
Open book.
Lab
5 in number
6% of your grade, total weight 30%
Writing Labs.
Class Participation
Total weight 10%
Class Participation will count towards 10% of your grade. Participation means attending Class Sessions, answering & asking questions, participating in forums, and submitting work on-time.
Lecture Exams
2 in number
Total weight 30%
T/F, multiple choices
Will cover specific chapters and appendices (see schedule)
Lock Down Browser
LockDown Browser Requirement
This course requires the use of LockDown Browser for online exams. Watch this video to get a basic understanding of LockDown Browser:
https://www.respondus.com/products/lockdown-browser/student-movie.shtml
Download Instructions
Download and install LockDown Browser from this link:
https://download.respondus.com/lockdown/download.php?id=999134577
Once Installed
- Start LockDown Browser
- Log into Blackboard Learn
- Navigate to the test
Note: You won't be able to access tests with a standard web browser. If this is tried, an error message will indicate that the test requires the use of LockDown Browser. Simply start LockDown Browser and navigate back to the exam to continue.
Guidelines
When taking an online test, follow these guidelines:
- [If testing is to occur at a designated location, such as a testing center, add those instructions here.]
- [If applicable] Select a location where you won't be interrupted
- Before starting the test, know how much time is available for it, and also that you've allotted sufficient time to complete it
- Turn off all mobile devices, phones, etc. and don't have them within reach
- Clear your area of all external materials - books, papers, other computers, or devices
- Remain at your desk or workstation for the duration of the test
- LockDown Browser will prevent you from accessing other websites or applications; you will be unable to exit the test until all questions are completed and submitted
Getting Help
Several resources are available if you encounter problems with LockDown Browser:
- The Windows and Mac versions of LockDown Browser have a "Help Center" button located on the toolbar. Use the "System & Network Check" to troubleshoot issues. If an exam requires you to use a webcam, also run the "Webcam Check" from this area
- [As applicable, insert information about your institution's help desk, including details about how to contact them. Some help desks want students to run the "System & Network Check" and the "Webcam Check" before they are contacted - and even, to forward the results of these checks at the time of opening a ticket.]
- Respondus has a Knowledge Base available from support.respondus.com. Select the "Knowledge Base" link and then select "Respondus LockDown Browser" as the product. If your problem is with a webcam, select "Respondus Monitor" as your product
- If you're still unable to resolve a technical issue with LockDown Browser, go to support.respondus.com and select "Submit a Ticket". Provide detailed information about your problem and what steps you took to resolve it
Use of ACC Testing Center
All testing is currently online. While campuses are closed, exams for courses will be online tests that students can take from home. For more information about online testing at ACC, visit the Online Testing resource page: https://www.austincc.edu/academic-and-career-programs/acconline/testing.
Exception to Grade Reduction
To prevent grade reduction, you must meet the following conditions:
- You must have experienced an unforeseen and sudden emergency. Note: getting behind in the course is not an unforeseen emergency.
- You must present Professor Wade documented proof of your emergency.
- You must contact Professor Wade in person, by phone, or by e-mail of your emergency on or before the exam deadline date or the exam administration date and time.
Retesting & Extra Credit
Labs can be resubmitted until the end of the semester. Mid-term and Final Exams can be taken only once. No Retesting of Mid-term or Final Exam is permitted. Unless an extra lab is provided, no additional Extra Credit can be awarded.
Grades will be posted as they are earned throughout the semester. You must report (in writing) all grading issues within seven calendar days of the grade being posted. If you have not reported a grading issue within the seven calendar days, then the grade will be final.
Grades are based on achievement, not effort.
Readings
Class Readings will follow the schedule below:
CSIS 3342 Class Schedule Ver 1 | |||||||
Spring 2024 | |||||||
Tentative schedule subject to change | Holidays: Spring Break | ||||||
Wk. | Cl. | Day | Date | Lecture | Readings | Lab | Due |
1 | 1 | T | 16-Jan | Introduction Syllabus Incident Response and Disaster Recovery |
Syllabus | ||
2 | 2 | T | 23-Jan | Module 1 Overview of Informatino Security and Risk Management |
Module 1 | Contingency Planning Policy Statement | |
3 | 3 | T | 30-Jan | Module 2 Planning for Org. Readiness |
Module 2 | Risk Assessment Business Impact |
Module 1 Quiz Lab 1 Due |
4 | 4 | T | 6-Feb | Modules 3 Contingency Strategies for Incident Response, Disaster Recovery, and Business Continuity |
Module 3 | Risk Assessment Business Impact |
Module 2 Quiz |
5 | 5 | T | 13-Feb | Module 4 Incident Response: Planning |
Module 4 | Risk Assessment Business Impact |
Module 3 Quiz |
6 | 6 | T | 20-Feb | Module 5 Incident Response: Organizing and Preparing the CSIRT |
Module 5 | Risk Assessment Business Impact |
Module 4 Quiz |
7 | 7 | T | 27-Feb | Module 6 Incident Response: Incident Detection Strategies |
Module 6 | Incident Response Plan | Module 5 Quiz Lab 2 Due |
8 | 8 | T | 5-Mar | Module 7 Incident Response: Detection Systems |
Module 7 | Incident Response Plan | Module 6 Quiz |
9 | 9 | T | 12-Mar | Spring Break | |||
9 | 9 | T | 19-Mar | Module 8 Incident Response: Response Strategies |
Module 8 | Incident Response Plan | Module 7 Quiz EXAM 1 DUE |
10 | 10 | T | 26-Mar | Module 9 Incident Response: Recovery, Maintenance, and Investigations |
Module 9 | Disaster Recovery Plan | Module 8 Quiz Lab 3 DUE |
11 | 11 | T | 2-Apr | Module 10 Disaster Recovery |
Module 10 | Disaster Recovery Plan | Module 9 Quiz |
12 | 12 | T | 9-Apr | Module 11 Business Continuity: |
Module 11 | Business Continuity Plan | Module 10 Quiz Lab 4 Due |
13 | 13 | T | 16-Apr | Module 12 Crisis Management in IR, DR, and BC |
Module 12 | Business Continuity Plan | Module 11 Quiz |
14 | 14 | T | 23-Apr | Business Continuity Plan | Module 12 Quiz | ||
15 | 15 | T | 30-Apr | Lab 5 Due | |||
16 | 16 | T | 7-May | ALL WORK DUE | EXAM 2 DUE |
Course Subjects
Course Subject material will consist of the following items below utilizing the schedule below:
CSIS 3342 Class Schedule Ver 1 | |||||||
Spring 2024 | |||||||
Tentative schedule subject to change | Holidays: Spring Break | ||||||
Wk. | Cl. | Day | Date | Lecture | Readings | Lab | Due |
1 | 1 | T | 16-Jan | Introduction Syllabus Incident Response and Disaster Recovery |
Syllabus | ||
2 | 2 | T | 23-Jan | Module 1 Overview of Informatino Security and Risk Management |
Module 1 | Contingency Planning Policy Statement | |
3 | 3 | T | 30-Jan | Module 2 Planning for Org. Readiness |
Module 2 | Risk Assessment Business Impact |
Module 1 Quiz Lab 1 Due |
4 | 4 | T | 6-Feb | Modules 3 Contingency Strategies for Incident Response, Disaster Recovery, and Business Continuity |
Module 3 | Risk Assessment Business Impact |
Module 2 Quiz |
5 | 5 | T | 13-Feb | Module 4 Incident Response: Planning |
Module 4 | Risk Assessment Business Impact |
Module 3 Quiz |
6 | 6 | T | 20-Feb | Module 5 Incident Response: Organizing and Preparing the CSIRT |
Module 5 | Risk Assessment Business Impact |
Module 4 Quiz |
7 | 7 | T | 27-Feb | Module 6 Incident Response: Incident Detection Strategies |
Module 6 | Incident Response Plan | Module 5 Quiz Lab 2 Due |
8 | 8 | T | 5-Mar | Module 7 Incident Response: Detection Systems |
Module 7 | Incident Response Plan | Module 6 Quiz |
9 | 9 | T | 12-Mar | Spring Break | |||
9 | 9 | T | 19-Mar | Module 8 Incident Response: Response Strategies |
Module 8 | Incident Response Plan | Module 7 Quiz EXAM 1 DUE |
10 | 10 | T | 26-Mar | Module 9 Incident Response: Recovery, Maintenance, and Investigations |
Module 9 | Disaster Recovery Plan | Module 8 Quiz Lab 3 DUE |
11 | 11 | T | 2-Apr | Module 10 Disaster Recovery |
Module 10 | Disaster Recovery Plan | Module 9 Quiz |
12 | 12 | T | 9-Apr | Module 11 Business Continuity: |
Module 11 | Business Continuity Plan | Module 10 Quiz Lab 4 Due |
13 | 13 | T | 16-Apr | Module 12 Crisis Management in IR, DR, and BC |
Module 12 | Business Continuity Plan | Module 11 Quiz |
14 | 14 | T | 23-Apr | Business Continuity Plan | Module 12 Quiz | ||
15 | 15 | T | 30-Apr | Lab 5 Due | |||
16 | 16 | T | 7-May | ALL WORK DUE | EXAM 2 DUE |
Student Learning Outcomes/Learning Objectives
Course Rationale
To introduce students to a broad range of security-related topics including risk management, contingency planning, incidence response, business resumption, disaster recovery, business continuity, and crisis management.
Course Objectives and Learning Outcomes
- Understand the process of planning for security
- Identify and assess risks
- Compose BIA, DRP, IRP, and BCP
- Perform contingency planning
- Understand preparation, organization, prevention, detection, decision making, reaction, and recovery phases of incident response
- Manage enterprise application and database backups
- Practice preparation, implementation, operation, and maintenance phases of disaster recovery
- Carry out preparation, implementation, operations, and maintenance disaster recovery tasks
- Perform crisis management including human factors
Office Hours
M T W Th F 4:00 PM - 6:00 PM Webex Online
NOTE Please make use of lab days, forums, and email for questions. Since I teach mostly Online, students should schedule a Webex meeting with me during my Office Hours.Published: 02/19/2024 09:38:00