Step 10: Prepare Situation Report for Computer Security Incident
You and your teammates will assist in the investigation of a complex computer security incident which has multiple teams representing a variety of specialties including digital forensics, malware analysis, and human resources. Before you begin the investigation, let’s find out more about what is known and who is working on the various parts of the incident response effort.
Review the Computer Security Incident Investigation information (provided below) and write the situation report.
The Situation Report (SITREP) is a form of status reporting that provides decision-makers and readers a quick understanding of the current situation. It provides a clear, concise understanding of the situation—focusing on meaning or context, in addition to the facts. It does not assume the reader can infer what is important or not, and what actions or decisions are needed. It calls out what is needed. Below are descriptions and guidance to complete the form. It can also be provided verbally in a 30 second to 5-minute duration.
WHAT SHOULD BE INCLUDED IN A SITREP
1. The situation to date (what has happened)Situation Report Template SITREP
A brief summary of “startup details” – date, place, time, who
Summary of overall situation to date
Ensure old information is deleted
2. Actions to date (what has been done)
Brief reporting of actions completed to date
Table format may be used for repeat actions and/or progressive totals or if similar are given e.g. destructions statistics, number of properties visited
3. Actions to be completed (what will be done)
Brief reporting of scheduled/planned actions – typically for the period covered by the SITREP
As mentioned above, a table may be used for repeat actions
Where the operation expects to be by the next SITREP
4. Issue(s)
Present a brief description of issue(s) that are known/reasonably expected to arise before the next SITREP is issued e.g. a shortage of a given resource, a significant OH&S issue
Acknowledgment of significant achievements, failures, etc. can be given here.
The SITREP template has been provided
Last Completed Projects
| topic title | academic level | Writer | delivered |
|---|