Create an incident response plan:

Company Name: North American Lumber Coalition
Description: North American Lumber Coalition is a global company that specializes in the harvesting and processing of lumber. They are a sustainability first company that is very concerned with responsible forest management.

You have been hired to lead the incident response team within the Cyber Security organization at NALC. Your first order of business is to execute planning and preparation. For this exercise limit your procedural documentation to address a website compromise.

Document the following:
1. Assumptions:
2. Incident response policy – should include:
~ Who is responsible, accountable, consulted, and informed
~ What model will you follow for incident response
~ Who can declare an incident
3. Team structure and necessary relationships
~ Who will be part of the incident response team
~ Who will be part of the executive incident response team
~ What outside relationships will be needed and when
4. Incident response procedures for a website compromise
~ This should provide a detailed roadmap of actions the incident response team must take when handling a website compromise
~ Should detail activities for each of the phases of incident response
5. Communications plan
~ How will the team communicate with each other during an incident
~ How will the team communicate with outsiders during an incident