Simplified computer incident response model for premium pension limited Nigeria

Abstract

One of the greatest challenges facing today's IT experts is planning and preparing for the unprepared or unexpected, especially in response to a security incident. An incident is described as any violation of policy, law, or unacceptable act that involves information assets such as computers, networks. In an organization which is activity involved in management or administration work, information and data is the most valuable assets in organization. Therefore, without accurate preparation and sufficient knowledge of information security, those assets will be exposed and destroyed. Premium Pension Limited Nigeria (PPLN) manages much information that is very confidential regarding customers such as government retirement savings account (RSA) salary pensions. That information needs to be accurate and should not be compromised by other parties, unless the authorized access to the information can to do the changes. However, without good care on customer’s information, information may not be handled properly and this will lead to loss of valuable data. Moreover, information security management needs to be considered in the organization to avoid anything unwanted situations. An incident response has become an important component of IT security management, because it provides process for discovering and maintaining computer incidents. The proposed incident response model can help the organization to reduce the number of attacks and assist the organization towards securing their data confidentiality, integrity and availability. The proposed model has been validated by PPLN experts through the use of questionnaire and feedbacks were analysed and changes were made. The final result shows that the new model can be used in PPLN.