INCIDENT RESPONSE PLAN of PRICE REPORTER INC

Objectives and Scope

The objectives of this IRP are to ensure:

  1. Immediate identification and management of security incidents.
  2. Compliance with Amazon-specific security requirements.
  3. Protection of sensitive information through robust access controls and timely reporting.

This IRP applies to:

  • Quicksales system
  • WebCRM for staff and employees
  • PriceReporter.com website
  • Terminal server for employees
  • MS365 system, including corporate email, web storage, and Teams
  • Backup servers and server monitoring systems

Daily backups are conducted, with SQL databases backed up hourly. Access to these systems requires encryption keys.

Description of Incidents

Common incident types include:

  • Phishing and Malware Attacks
  • Denial of Service (DoS) Attacks
  • Ransomware and Social Engineering Attacks
  • Data Loss (e.g., PII, intellectual property, financial information)

Incident Severity Criteria

Incident severity is determined by:

  • Impact on operations
  • Scope and cause of the incident
  • Severity and nature of affected data

Reporting Procedures

Upon identifying an incident, the reporting individual (e.g., Customer Service, IT, or Vendor) must notify:

  • Incident Response Manager
  • COO
  • Head of Developers

The Incident Response Manager will assess the severity and initiate the response process. For major incidents, the CEO will be informed and handle strategic decisions.

Notification Requirements – Amazon Notification: For incidents involving Amazon data, we will notify Amazon (via 3p-security@amazon.com) within 24 hours.

Enhanced Access Control Measures

Following Amazon’s review, Price Reporter Inc. has implemented the following access control measures:

  1. User Access Recertification: Access (both physical and logical) is recertified within 24 hours following internal role changes to ensure proper authorization.
  2. Physical Access Logging and Review: Logs of physical access, including failed attempts, are maintained and reviewed weekly to monitor for unauthorized access.
  3. Session Timeout Enforcement:
    o Interactive Sessions: Timeout enforced after 15 minutes of inactivity, requiring re-authentication to resume.
    o Non-Interactive Sessions: Timeout set to 24 hours, with re-authentication required to initiate new sessions. Non-sensitive data may have a longer timeout, as applicable.
  4. MFA for Privileged Access: Multi-factor authentication (MFA) is enforced for all privileged accounts within the internal network, with logging and monitoring of access attempts.

Incident Response Team Roles

  1. CEO: Oversees strategic management and resources for significant incidents.
  2. COO: Manages communication with stakeholders and internal coordination.
  3. Incident Response Manager: Leads technical response and security oversight.
  4. Head of Developers: Manages application security, development, and disaster recovery.

The Incident Response Team (IRT) includes members with diverse technical and leadership skills to effectively manage security incidents.

Stages of Incident Response

  1. Identification: Detect and verify incidents using system monitoring and alerts.
  2. Containment: Isolate affected systems to prevent further damage.
  3. Investigation: Determine the incident’s cause and collect evidence.
  4. Eradication: Eliminate the root cause and restore affected systems.
  5. Recovery: Return to normal operations and monitor for recurrence.
  6. Lessons Learned: Conduct post-incident analysis to improve response.

System Restoration Procedures

  1. Data Restoration: Recover lost data from backups.
  2. System Rebuild: Rebuild damaged systems as necessary.
  3. Testing: Verify that restored systems are functioning correctly.

Customer Notification

  • Notify affected customers immediately upon identifying an incident.
  • Provide regular updates and offer support to impacted customers until the issue is resolved.

Testing and Training

  • Testing: Annual tests, including tabletop exercises, simulated attacks, and penetration testing.
  • Training: Quarterly training, including workshops and online modules.
  • Evaluation: Regular reviews and assessments ensure continuous improvement of the IRP.

Contact List

Management

CEO: Igor London, 1 (201) 567-6646, iLondon@PriceReporter.com

COO: Sergey Bogol, 1 (201) 793-8338, SergeyB@PriceReporter.com

Technical Support

Lead IT Architect: Felix Gershcovich, FelixG@PriceReporter.com

Lead IT Admin: Ilia Lomadze, iLiaL@PriceReporter.com

Service Providers

Hosting: WhiteLabel, +1 (201) 425-4060, support@whitelabelitsolutions.com

Cloud Services: Microsoft Azure, +1 (800) 867-1389

NAS Storage and Backup: Synology Support: +1 (425) 296-3177

Retrospective and Continuous Improvement

After resolution, the IRP is reviewed to identify improvements, ensuring readiness for future incidents. This document is updated as needed to reflect best practices and evolving security requirements.

Contact our GSA Expert
Call 201.567.6646 or provide your details for a free consultation:

    Testimonials

    Price Reporter team has been efficient at managing our GSA contract catalogs for the past 5 years. They keep our catalogs well maintained and compliant, saving our resources and letting us focusing on making sales.

    Adorama
    Testimonials

    The B. David Company enlisted the services of Price Reporter, Inc. to setup our DOD EMALL account. We are a second generation family owned company and were uncertain what would be required to complete this task. I fully recommend Price Reporter, Inc. to any company that is looking for assistance with their Government business endeavors. They were and have continued to be extremely helpful. We will continue to rely on Price Reporter, Inc. for future projects.

    Steven Ribnick, Sales & Operations Analyst, B. David Company, Inc.
    Testimonials

    Price Reporter recently helped us with our 3rd GSA contract, the 2nd they did with us. It was the fastest we’ve ever been through the process with GSA. Each step was easy because the ground work was done before we were asked to do anything. Our pricing verification phase went smooth and quickly and both our contracts were accepted without rejection, with minimal negotiations with contracting.

    George McCullough, Director of Sales and Business Development, Darley
    Testimonials

    We first learned about the DOD EMALL a couple years ago from Price Reporter. We decided to move forward on it in 2016. I would recommend them based on the following items:

    • They split the payment. Half upfront and the other half is only charged should DOD EMALL contract be awarded to you.
    • Adding Price Reporter, specifically Andrey Karpov and Igor London, as agents on our GSA schedule streamlined the process. They were able to communicate with our GSA Contracting Officer to ensure that we received what we needed for DOD EMALL from GSA. This saved time on my end and sped up the process.
    • They provide a list of everything you need. Andrey and the rest of his team are meticulous and understand the process on how to get a DOD EMALL contract and thus we benefited from their expertise.

    These are a few of the reasons why I would recommend Price Reporter, Inc. Thank you!

    Karl Prince, Finance Director, AES Systems, Inc.
    Testimonials

    Since 2009, Price Reporter has provided Fisher Scientific timely competitive item level GSA pricing data allowing us to identify opportunities and threats. Their customer service focus is solid.

    Tim Evans, Government Segment Marketing Manager, NA, Fisher Scientific
    Testimonials

    Price Reporter are helping make my life much easier and helping me feel so much better about our GSA contract. Thanks!!!

    Kristen Briggs, President, General Mailing & Shipping Systems, Inc.
    Testimonials

    For the past 10 years, Price Reporter has been providing us with exceptional service for the maintaining of our GSA office supplies contract. They have updated our files on a very timely basis. They have provided modifications when required. For a number of years, they had been giving us a price algorithm where each of our items were priced more than our cost and a penny below the next competitor. A very unique position that gave us thousands of government orders – that was prior to the GSA FSSI BPA.
    And for all the service given, their cost was far less than any other consulting firm that we had contacted or worked with over the years.
    I would highly recommend their service to any small business that is either interested in getting into the federal government arena or who wants to have their contract maintained at a most highly professional level.
    Thank you for supporting a VETERAN OWNED SMALL BUSINESS.

    Bill Finch, Northeast Office Supply
    Testimonials

    We looked around for a reputable company to help us acquire a GSA contract for Muzeek World Intl., Inc. After looking around we were unsuccessful in finding a good company. By chance, one of our colleagues recommended Price Reporter, Inc., so we called them up. I highly recommend Price Reporter to anyone looking for help in acquiring a GSA contract or any Government business dealings. They have the expertise and the know-how to get the work completed.

    Arash Sardarizadeh, Chief Operating Officer, Muzeek World Intl., Inc.
    Testimonials

    We have used Price Reporter for various services over the past 5 years and have been very happy with the services they have provided and continue to provide for us. They work hard to help you get the most from your GSA Schedule and are able to adapt and customize to what your particular needs are. I highly recommend their services to others with GSA Schedules as they help you maximize your sales

    Jaime Mautz, PacificInk
    Testimonials

    We are extremely grateful for all your help in guiding us through the whole process, as this was all new to us. Without the help of you and the rest of the team at Price Reporter, it would have been impossible to achieve our approval – or at the very least – it would have taken a very long time. I would not hesitate to highly recommend Price Reporter, Inc. to anyone needing assistance in government contracts. Your knowledge and assistance was invaluable and very much appreciated, and we look forward to a continued excellent relationship.

    Lee Middleton, CEO, Point Two Air Vests USA, LLC
    Testimonials

    Without Price Reporter contacting me at the right time, GSA would probably cancel my contract already. The CO said that she contacted us back in November of 2016, but got no response. Then Price Reporter called me and helped me with all the things needed and I followed his advise. That’s how we found out that our contract will be terminated soon, but had enough time to take the corrective action. The CO called us recently and it looks like they will extend our contract life. Thanks so much for your timely follow up – Price Reporter gave our Government sales a new hope!

    Jennifer Truong, President, SF Cable, Inc.
    Testimonials

    My company STEC-STEADFAST TECHNICS have worked with 2 IT companies before we linked up with PRICE REPORTER ,INC over 5 years ago. Ever since our relationship with the company, there is no reason to stop working with them.
    The company is staffed with experienced and high Tech professionals who meet our needs adequately.

    Olufadeji Amele, Owner
    More Testimonials
    This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

    Get a Consultation

    Fill out the form below and one of our experts will contact you to discuss next steps.






      We'll get back to you within one business day.