Assignment 6: Draft an Incident Response Playbook
Due November 21, 2026 at 11:59pm · 50 points
Instructions
- Pick one incident type: ransomware, stolen laptop, or web application compromise.
- Write the playbook using the six lifecycle phases, with concrete actions in each.
- Name the roles involved and who has authority to declare an incident and to disconnect systems.
- State what evidence you would collect, in what order, and how you would preserve chain of custody.
- Define the communication plan, including when legal and affected individuals are notified.