PowerPoint Presentation

Work on Powerpoint presentation. Should be based on attached paper. See BOLDed part of instructions.  Create slides for Readiness Response, Coordination Plan and Metrics. References used from attached should be on final slide. MUST include NIST in the reference.

Responding to a situation where one computer is the subject of an investigation is far different than responding to a situation involving many people and devices.  We’ll coin our own term here and call it Large Environment Forensics.  The idea is that many people can be impacted, and in a Cloud architecture, potentially many organizations could be involved.  As you work through this assignment, think Large Enterprise Environment and Big Data.
For this assignment each team prepares a written report that analyzes how to respond to a Large Environment Forensics incident where many people/devices may be involved: Cloud, Big Data, Large Enterprise Environment. You are free to choose whether you have a team within an enterprise or if you are a team deployed from a forensic response organization.  Specify which of the two options you choose in your assignment abstract. Within your report each team must address the following:
1)  Response Readiness Plan – this is a document that serves as a tool to plan an incident response.  This would include a method to determine a gross time estimate of effort, resources, and cost.  Our goal is to be in an order of magnitude, not a precise figure.  Think small/medium/large and perhaps two categories within each of those.  Effort is time involved as well as elapsed time.  Resources includes people, equipment, tools and licenses, transportation, lab requirements, and other considerations. Realize that in a particular incident you may have a large cost estimate, but potentially a small resource and time estimate.  In other words, your small/medium/large classification may be mixed for a particular incident. 
2)  Coordination Plan – this outlines a structure of the competencies needed, who is responsible for each, a project leader, and contact information.
3)  Metrics – this will be used to measure various aspects of the response and help provide accurate estimates.  For example, one metric may be imaging speed – i.e., using a hardware imager provides speeds of up to 6GB/minute with hashing, so estimates for imaging a 1TB disk could be calculated.  Include at least 10 metrics that you will use for your estimates.  These should be accurate and include reference support.
 There are two (2) required deliverables for each team:
Written report — the length of this paper should be 12-15 pages double spaced not inclusive of the cover page, table of contents, reference pages, or any appendix. Submit your final report in MS Word format and post it in the Collaborative Documents area in your Study Group. The citations and the reference list in the paper should be formatted in accordance with APA 6th edition guidelines.

 
PowerPoint presentation — prepare a brief “Executive Summary” presentation (no more than 7 slides), that is intended to be presented to the senior corporate management at XYZ, Inc. summarizing your recommendations. In addition to the slides, your presentation should include the accompanying PowerPoint note pages wherever applicable.

 You must use the study group area for all communications as I will be monitoring this to evaluate the contribution level of each student. If you hold a chat session, please post a transcript of the chat in your study group area. Please minimize the use of e-mail as I cannot review this for contributions. Substantive communications should be within the study group area and e-mail is reserved for short messages or notices to check the study group area.