?CIS359 WK 5 discusion questions

1. Explain why it is important for a business to have a specific plan of action, processes, and / or a set of guidelines to manage potential security incidents that may arise. Support your answer with a real-life example. Be sure to clearly identify the business as well as the potential security incident in your example. Discuss the role of incident containment in an incident response strategy and how a lack of planning for containment is a potential pitfall for any response strategy. Week 5 eActivity Go to GSN Magazine’s Website to read the article titled “Automated incident response makes the difference in cyber security”, dated May 29, 2012, located at http://www.gsnmagazine.com/node/26454. Be prepared to discuss. 2. From the e-Activity, explain in your own words the purpose of security information and event management (SIEM) solutions and how this category of tools can assist an incident response team. Also determine whether or not you believe the “golden hour” is a realistic and attainable response goal. Justify your answer. Compare and contrast two SIEM tools of your choice based on their common uses and market reputation. Determine which of these tools you would prefer to use as part of an incident response strategy and explain why. *** this is not an essay. just short anwsers. I would like current refances please****