Purpose
To provide Pomona College with guidance to developing and implementing the appropriate activities to take action regarding a detected information security event.
Policy
Pomona College has an Incident Response Plan (IRP) that addresses the processes and procedures to be executed and maintained, to ensure timely response to a detected information security event. Analysis of detected information security events is conducted, by Pomona College, to ensure adequate response and to support recovery activities. Upon detection of an information security event, Pomona College will take the necessary actions to prevent the expansion of an event, to mitigate its effects, and eradicate the incident. Upon mitigation of an information security event, Pomona College will incorporate lessons learned into the Incident Response Plan to improve upon it.
Summary
Description of the incident detection, analysis and response policy of Pomona College including the Incident Response Plan (IRP), Incident Response Communications and containment, eradication and recovery mechanisms.