2018 ELECTION SECURITY PLAYBOOK
The following are elements present throughout the Cyber Incident Management Lifecycle: • Communication - Notifying appropriate internal and external parties and maintaining situational awareness. • Analysis - Examining available data to support decision-making throughout the Cyber Incident Management Lifecycle.
• Documentation - Recording and time-stamping all evidence discovered, information, and actions taken from Identification through follow-up.
Direct contacts and methods of escalation are imperative to be defined as we prepare for any given election. In the event of an actual attack or incident, we ensure this information and the cybersecurity incident response plan are accessible. It is critical as we prepare and increase our cybersecurity presence, that all involved parties remain in frequent communication, coordination, and are well acquainted with our cybersecurity playbook plans. Threat Intelligence Services Threat Intelligence helps organizations understand the risks of the most common and severe external threats. Earlier in this report, we have described how we use partnerships and collaboration to help prevent and mitigate cybersecurity threats. We also utilize those partnerships to respond to incidents. As an example, we have established a partnership with OCIAC. Not only do they help to identify threats before they occur, they also provide support to respond to an incident, and share the intelligence with other potentially affected entities. Data Backup and Recovery An important component of an incident response plan is to have a robust recovery plan, including the ability to restore and recover data after a major disaster. We monitor our backups closely, and we follow best practices in backing up and performing test restores of data. By simply following best practices, our backup and recovery strategy can be an effective defense against encryption and extortion attacks such as ransomware or other data loss.
ORANGE COUNTY REGISTRAR OF VOTERS
25
Made with FlippingBook Digital Proposal Creator