Computer Forensics: Incident Response Essentials

Appendix A. Internet Data Incident Response Guidelines

This appendix defines a process for handling computer security incidents in Internet data centers. Because it is impossible to prevent all security incidents from occurring, your company must prepare itself. Good training and adherence to a process can provide quick resolution to security incidents while minimizing the potential damage.

This appendix applies to all hosts located in Internet data centers, including not only Web hosts, but also mail hosts, billing servers, DNS servers, and other servers visible to the Internet. Such a data center is a complex organization with many internal and external constituencies. The organizations fulfilling incident response (IR) roles change depending ...