Computer Incident Response and Forensics Team Management

Part 3. General Management and Team

This part covers corporate oversight, management, and direction for the SIR&FT and its activities. One of the areas relevant to this activity is the utilizing the standards produced for Incident Response and Forensics. External statutory and regulatory requirements for the organization are another area of consideration.

External Considerations

There are numerous state, federal, and international compliance regulations affecting businesses around the globe which affect the corporate oversight, management, and legal standing of the organization. These requirements include:

■ Payment Card Industry Data Security Standard (PCI DSS)

■ Sarbanes–Oxley Act (SOX)

■ Health Insurance Portability and Accountability Act ...