Certified Information Security Manager Exam Prep Guide - Second Edition

9

Incident Management Readiness

This chapter provides an overview of information security incident management and the advantages of a structured and effective incident management process. CISM aspirants will be able to gain an understanding of the different aspects of incident management.

The following topics will be covered in this chapter:

• Incident Management and Incident Response Overview
• Incident Management and Incident Response Plans
• Business Impact Analysis
• Business Continuity Plans and Disaster Recovery Plans
• Insurance
• Incident Classification/Categorization
• Testing Incident Response, BCP, and DRP

Incident Management and Incident Response Overview

Figure 9.1: Incident management

Incident management is defined as the process of handling ...