This slide explains the APA requirements to language of an APA paper.

Clarity and conciseness are the major concern when reporting research in APA . It is not easy to balance clarity (which requires providing clarification) and conciseness (which requires packing information). To achieve clarity, a writer should avoid vague wording and be specific in descriptions and explanations. To achieve conciseness, a writer should condense information. Because APA format is widely used in science-related papers, the language of APA format is plain and simple. A writer should avoid using metaphors and minimize the use of figurative language, which is typical for creative writing.

This slide can be supplemented by the relevant sections from OWL

http://owl.english.purdue.edu/owl/resource/560/15/

http://owl.english.purdue.edu/owl/resource/560/14/

and “Conciseness in academic writing” handout http://owl.english.purdue.edu/owl/resource/572/01/

*

The Literature Review:

• Summarizes scientific literature on a particular research topic
  
• Includes:
• a title page,
• introduction, and
• a list of references

Types of APA Papers

Team leader—This individual is responsible for the team’s actions.

A team leader is usually a senior manager with expertise in security, However, some CIRTs identify the first team member that arrives on the scene as the team leader.

Information security members—These individuals could be experts on boundary protection.

This includes firewalls and routers on the edge of the network. They are able to identify the source of breaches and recommend solutions.

These members could also be experts in intrusion detection systems (IDSs) and other systems that include audit logs and audit trails.

Network administrators—Network administrators understand the details about a network.

They understand what systems are connected and how they’re connected. They also understand what systems are accessible from the Internet. They know what normal traffic flow is and can recognize abnormal traffic.

Physical security—Because attackers can be social engineers and might be on company property, physical security personnel need to be represented on the team.

They know what physical security controls the organization uses, where these controls are located, and their purpose.

Legal—Legal personnel provide advice on the organization’s legal responsibilities and legal remedies.

This can be before, during, and after an incident. Legal personnel understand what legal actions are possible against the attackers. They also understand

the requirements necessary to pursue legal actions.

Human resources (HR)—If the attack originated from an employee, HR needs to be involved.

HR understands the organization’s policies. They are also aware of the available enforcement methods. For example, if an employee violates the AUP, the first offense may result in a formal written warning. A second or third offense may result in termination. HR personnel would know if the employee had been previously warned.

Communications—Public relations (PR) personnel become the face of the organization if the incident becomes public.

They help to present an image of resolve, even if everything is not quite under control. If PR reps aren’t used, team members might express frustration or confusion about the attack. This can present a poor image to customers, vendors, and stockholders of the organization.

7

Incident Response Lifecycle

Four phases defined by NIST SP 800-61