Nicholas Malley

CYSE 368

17 November 2023

Reflection 4

            During the fourth week of my internship for Tower Federal Credit Union’s information security department I was assigned to write an incident response summary report of a third-party vendor cyber-attack. IMSI, Tower Federal Credit Union third party vendor that holds sensitive information of Tower Federal Credit Union members was the target of a ransomware attack.

            My main tasks with composing the incident response summary report was to follow TFCU’s five phases of incident response which are identification, containment, eradication, recovery, and follow-up. With limited information available regarding the attack vector, identification and containment were the primary phases I focused on.

            Later in the week, I worked with one of my peers, Patrick. Patrick walked me through Security Operations Center (SOC) activities. While doing so, I assisted Patrick in successfully resolving three tickets related to server updates. I also had the opportunity of introducing myself to the CEO of TFCU, Rick Stafford. I am confident I made a good impression.

            In summary, during the fourth week of my internship I had the responsibility of drafting an incident response summary report. Later in the week, I collaborated with Patrick, who guided me through Security Operations Center (SOC) activities. Together, we successfully addressed three tickets related to server updates. Additionally, I took the initiative to introduce myself to TFCU’s CEO, Rick Stafford, and feel confident that I left a positive impression. In all this has been the busiest week of my internship thus far.