Plan, React, and Recover: A Cybersecurity Incident Response Workshop

Location: In person at Pacific Tower, Seattle, Washington.

Duration: 3.5 hours. 9AM to 12:30PM Pacific Time.

Light breakfast served.

Maximum 35 attendees.

Cost: $50

You know that you should be preparing for a cyber attack that may disrupt your organization's technology, but it is easy to put it off until the unthinkable happens. When an attack occurs, you may lose access to email, essential cloud applications, or critical data, sometimes for days or weeks depending on the nature and severity of the attack. Do you have a plan of action prepared? Have you ever tested your incident plan?

Join us for this three-hour, extensive workshop that will walk you through the key considerations and steps needed to develop a thorough incident response plan to address external and internal cybersecurity threats. You'll learn how to esemble an incident response team, who should be involved in the planning process, and how often you should test and update your plan.

Experts Ron Walters and Dan Brown are Cyber Security Advisors for the federal agency known as CISA, The Cybersecurity and Infrastructure Security Agency. They will help you assess your technology environment, identify vulnerabilities, and share information about the latest threats you will face. You'll also learn about how you can access the many free cybersecurity resources and services available to your organization through CISA.

Presenters

Ron Walters

Ron Walters, MEd., CISSP, GSLC, Cybersecurity Advisor-Region 10 Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security.

Based in Seattle, WA, he supports the Department of Homeland Security (DHS) mission of strengthening the security and resilience of the nation's critical infrastructure.

His program coordinates cyber preparedness, risk mitigation, and incident response, and provides cyber security resources, including assessments, to the nation’s sixteen critical infrastructure sectors and state, local, tribal, and territorial government entities.

Before joining DHS, Ron served 27 years with the U.S. Navy and Naval Reserve as a Submarine Sonar Technician and Diver.

Dan Brown

Dan Brown, CISSP, CISM, and ITIL foundation. Cybersecurity Advisor at CISA.

Dan Brown serves as the Cybersecurity Advisor for Eastern Washington and is based in Spokane, WA. He supports CISA's mission of leading the national effort to understand, manage, and reduce risk to our cyber and physical infrastructure.

He offers CISA resources that coordinate cyber preparedness, risk mitigation, and incident response. He provides cybersecurity resources, including assessments, to public and private stakeholders in the nations’ sixteen critical infrastructures, including auxiliary support for state, local, tribal, and territorial government entities.

Prior to joining CISA, Dan worked in information technology and cybersecurity for more than 25 years. Most recently, he worked at the Community Colleges of Spokane as their Information Security Officer (ISO). Before that, he worked for 17 years at Washington State University as an Assistant Director of Systems and Security.

His education includes an undergraduate degree in Management Information Systems (MIS) from Eastern Washington University and an M.B.A. from Washington State University.

Workshop Outcomes

This workshop will introduce you to incident management policy and planning. You will not write an incident response plan during the workshop but will learn in-depth about the steps required to create a plan for your organization. The purpose of the workshop is to provide foundational knoweldge suffcient to give you a good starting point to:

• Engage Executive leadership in the creation of policies necessary for plan development

• Identify staff and equipment needed to respond to incidents

• Include a variety of possible incidents (manmade and natural) in your response plan

• Plan for incident detection

• Integrate business, technical, and partnership considerations in your planning

• Build planning evaluation and update cycles into your incident management process

Who Should Attend

• This workshop is for nonprofit professionals of all disciplines, including operations, compliance officers, IT professionals, board members, executive leadership, HR and training professionals

Free Assistance from CISA

Learn more about CISA's free incident response training resources at https://www.cisa.gov/resources-tools/programs/Incident-Response-Training

About the TechOE Program

The Information Technology Outreach and Education program (TechOE) provides education, IT management, and planning services created exclusively to meet the needs of nonprofit professionals who lead and manage data security and technology. Our tech clinics, workshops, and consulting services are affordable, jargon-free, and vendor neutral. TechOE can support your efforts to secure your information systems and data, meet compliance responsibilities, and make impactful use of the technology you already use.

To see all upcoming TechOE events or watch videos and download resources from past events, visit the TechOE Events home page.

Got a tough decision about a tech investment coming up? Call on us for advice you can trust.

Program Manager, Kai Dailey, kai@501commons.org

This workshop is made possible by CISA, the Cybersecurity and Infrastructure Security Agency and is hosted by the TechOE Program at 501 Commons