A GUIDE TO ENHANCING BUSINESS CONTINUITY USING COMPUTER SECURITY INCIDENT RESPONSE MANAGEMENT SYSTEMS

ABSTRACT

Computer security incident response is a management activity within the corporate governance framework of a business enterprise, and has become an important component of information technology (IT) programs for IT enabled business establishments. It provides the strategic direction for security activities and ensures objectives are achieved and protects day to day business operations. This research work provides a platform for enlightening and assisting organizations on the awareness and in the establishment computer security incident response capabilities, and also handling incidents efficiently and effectively. This research work also provides guidelines for incident handling, particularly for analyzing incident-related data and determining the appropriate response to each incident. The aim of this work is to propose a guide to and to affirm the relevance of Computer Security Incident Response Management Systems (CSIRMS) in enhancing Business Continuity in IT enabled organizations and institutions, especially financial institutions. This research work also suggests suitable major software requirements for developing a Computer Security Incident Response Management application software.

TABLE OF CONTENTS TITLE PAGE i TABLE OF CONTENTS iiABSTRACT ivCHAPTER ONE 1INTRODUCTION 11.1BACKGROUND TO THE STUDY 11.2STATEMENT OF RESEARCH PROBLEM 41.3JUSTIFICATION OF THE STUDY 61.4SCOPE OF THE STUDY 81.5AIM OF THE STUDY 91.7 DEFINITION OF RELEVANT TERMS 9CHAPTER TWO 112.0INTRODUCTION 112.1THE CONCEPTS OF BUSINESS CONTINUITY 112.3NEED FOR SECURITY INCIDENT MANAGEMENT AND BUSINESS CONTINUITY 162.4EFFECTIVE BUSINESS CONTINUITY MANAGEMENT PLAN 192.5APPLICATION OF COMPUTER TECHNOLOGY TO SECURITY AND BUSINESS OPERATION 202.6GUIDES TO COMPUTER SECURITY INCIDENT DETECTION AND HANDLING 222.7INCIDENT RESPONSE CAPABILITIES 242.8REVIEW OF RELATED WORKS 312.9WEAKNESS AND STRENGTH OF COMPUTERIZED INCIDENT RESPONSE SYSTEM 36CHAPTER THREE 383.1SYSTEM ANALYSIS 383.2ANALYSIS OF THE PROPOSED SYSTEM 383.3ANALYSIS OF SYSTEM SECURITY 46 iii3.4BUSINESS BENEFITS OF AN EFFECTIVE INCIDENT MANAGEMENT AND RESPONSE CAPABILITY 48CHAPTER FOUR 504.1APPLICATION SOFTWARE DESIGN 504.2DATABASE DESIGN 514.3FLOWCHART OF PROGRAM MODULES 52CHAPTER FIVE 566.1CONCLUSION 596.2RECOMMENDATION 60REFERENCES 62