TIM-8320

National Institute of Standards and Technology. (2010, May). Contingency planning guide for federal information systems. NIST.
This PDF details various plans to be used in the process of contingency planning.
Read Chapter 3.2 sections - Conduct the Business Impact Analysis (BIA) pages 15-19 are relevant to the assignment.

Viira, T. (2018). Lessons learned: Critical information infrastructure protection – how to protect critical information infrastructure. IT Governance Publishing.
Read Chapter 10 – Threats and Vulnerabilities of Information Systems.
This chapter describes the importance of identifying threats to critical infrastructure systems that are used by the organization.

Viira, T. (2018). Lessons learned: Critical information infrastructure protection – how to protect critical information infrastructure. IT Governance Publishing.
Read Chapter 11 – Assessment of the Impact of Service Disruptions.
This chapter discusses the importance of assessing the impact of service disruptions.

Viira, T. (2018). Lessons learned: Critical information infrastructure protection – how to protect critical information infrastructure. IT Governance Publishing.
Read Chapter 12 – Risk Assessment.
This chapter explains the process of creating mock scenarios in the organization to determine the extent to which security measures are adequate.

Gorecki, A. (2020). Cyber breach response that actually works. Wiley Press.
Read Chapter 1 – Understanding the Bigger Picture.
This chapter discusses the evolving threat landscape, defines a cyber breach response and related drivers, and how to create a strategy for incident response management.

Qin, Y, Peng, Y., Huang, K., Zhou, C., & Tian, Y. (2021). Association Analysis-Based Cybersecurity Risk Assessment for Industrial Control Systems. IEEE Systems Journal, Systems Journal, IEEE, 15(1), 1423–1432.
This journal article details a data-driven intrusion response system case study performed in an industrial setting. The findings and recommendations for future research are discussed.

Sakrutina, E., & Kalashnikov, A. (2020). Towards the issue of the cybersecurity analysis of a significant object of critical information infrastructure. 2020 13th International Conference Management of Large-Scale System Development (MLSD), 1–5.
This journal article discusses the growth in the number of cybersecurity events that have occurred and the impact on critical information infrastructure. The authors explain the issues of risk formation and assessment and the need for all stakeholders to maintain risk awareness.