© Jeremy Wittkop 2016

Jeremy Wittkop, Building a Comprehensive IT Security Program, 10.1007/978-1-4842-2053-5_5

5. Incident Response Planning

Jeremy Wittkop

(1)Boulder, Colorado, USA

People can either deal with cyber threats through leadership, or they will be forced to deal with them through crisis.

—Leon Panetta

We should start our discussion of Incident Response Planning by defining exactly what an Incident is in Information Security parlance. However, in order to truly understand an Incident, you must first understand an event. An event is something that happens inside an organization that is possibly of concern. An Incident is a confirmed event that has a significant impact on an organization from a financial or an operational perspective. ...

Get Building a Comprehensive IT Security Program: Practical Guidelines and Best Practices now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.