Official (ISC)2 Guide to the SSCP CBK, 2nd Edition

Chapter 7

Risk, Response, and Recovery

Chris Trautwein

Contents

Introduction to Risk Management

Risk Management Concepts

Risk Management Process

Risk Assessment

Step 1. System Characterization

Step 2. Threat Identification

Step 3. Vulnerability Identification

Step 4. Control Analysis

Step 5. Likelihood Determination

Step 6. Impact Analysis

Step 7. Risk Determination

Step 8. Control Recommendation

Step 9. Results Documentation

Risk Mitigation

Risk Reduction and Limitation

Risk Transference

Risk Avoidance

Risk Acceptance

Risk Management Summary

Incident Response

Preparation

Detection and Analysis

Containment, Eradication, and Recovery

Post-Incident Activity

Incident Response Summary

Forensics

Evidence Gathering

Evidence Handling

Recovery

Disaster ...