Question

Below is an article, Please summarize it in your own words. 2-3 paragraphs!

COMMUNICATION PLAN

The SOC should have a standard communication plan above and beyond what we have already talked about in daily operational management calls or critical bridges. This communication plan should detail all the different scenarios where distinc- tive people should be contacted and what their contact information is when specific events or incidents occur. Organizations should work hard to establish the best IR communication plan as possible and it should be reviewed on a regular basis to en- sure that lessons learned and organizational changes are accurately reflected.

The communications plan should include an easy to read table of contents that list specific types of incidents and page numbers or tab number. Each incident listed should have a short description of the event along with conditions in which an analyst would execute the communications procedure.

The procedure should be a list of functions or roles of people in the organization or outside the organization that would need to be contacted. Some of the communications would be through email where as more critical notifications would be direct phone call. Each incident would have its own listing of who gets emails versus who would get the phone call. The variation of who gets what would be listed on a case by cases basis based on the incident as different incidents would have different importance’s to differ- ent departments or groups. The plan may just list the departments or individual rolesthat an analyst is to call, such as V.P. of IT Infrastructure or Security liaison to Legal, external marketing or communications. The plan should not list individual’s names in the description or procedure portion, instead the specific names and contact informa- tion should be included as an easy reference in the back of the plan. This way the plan does not need to be updated every time someone changes phone numbers or positions.

Each person assuming a role in the organization that would have incident or breach notifications should have a simple record of contact information in the back of the procedure book. The information to include is basic:

Communication plan 137

138 CHAPTER 6 Daily operations Name Title Phone # Alternate phone # Email address The number of people that can be included in the communications plan can be extensive, it may be more manageable to split the contacts up into different groups. For example, the first group could just be general SOC and IT management along with other closely interested people. For example, if you had an internal incident that was a violation of policy you may want to include SOC and IT management and also HR, but it may not necessarily be appropriate to contact legal right away. Instead you may want to save notification to legal as a secondary escalation. Then if legal believes that the person should be arrested or if there is going to be an external agency brought in then you may want to include public affairs as a third level of escalation notifications. Additionally your notifications may not necessarily be just to individuals that are assuming roles in your plan. You may also want to reach out to vendors or third parties that may need to get involved to help or provide services. This could be an IR team as part of your managed security services, or just your Internet provider that can help you block specific types of unwanted traffic. If your SOC has a relationship with local law enforcement you may want to include them as well. Here are some of the people you may want to consider being part of your communications plan: SOC manager Incident handler Legal affairs MSSP Privacy officer CIO or CISO Public affairs Internet service provider Internal audit local law enforcement Local FBI Bank Human resources

Answer 1

Summary :

The above mentioned article aims to demonstrate the needs and necessity of a standard communication plan for SOC which should highlight the details about the recent scenarios where interaction with people becomes important for which communication plan is essentially to be made at place.

The communication plan mentioned in the article is expected to provide insights to various scenarios which neccessiate the interaction with distinctive people for getting to know about their information on various incidents and occasions.
The article stresses the need for introduction of an efficient IR communication plan which should be made subject to verification and continuous monitoring to ensure its validation and viability in reflecting properly the need for organisations change. This communication plan should be designed and documented in a way to be comprehensive enough for readers and to specify explicitly the communication procedure to be followed for each listed event under certain conditions.

The procedure above mentioned should include a list of people inside or outside of organization along with respective functions and roles against their names which are to be performed by them. The nature of incidents would decide whether Communication would would take place through email or phone call and to whom the particular case will be listed which will have different significance for different departments.

The article specifically mentions that the introduced communication plan should list the role of each individual or department while stressing on not mentioning the name of the individual rather should list the contact information or related info. for easy reference. This way the information will not be needed to updated everything position or phone number changes.
The article has further provided with a practical example of a communication plan in the form of email which effectively clarifies all the doubts with demonstration of necessary details to be mentioned in the plan along with mentioning various people who might be made a part of communication plan incase SOC is associated with the local law enforcement making it mandatory to inform them of essential data. The communication plan designed ensures to mention each detail and item which will ensure that communication taking place is clear and effective for example through managing the extensive number of people through maintaining groups which will distribute tasks and avoid discrepancies that might otherwise arise.

.
.
.
Thank you dear student...
Hope i explained well..
Good luck and God bless :)
Please rate if satisfied that will be helpful to you ...