
198 䡲 Cyber Forensics Field Manual, Second Edition
Table 7.2 General Incident Response Progression Questionnaire
1. Preincident Steps—These steps are designed for planning activities that occur prior to an
incident.
a. Develop and disseminate policies on incidence response.
b. Establish an internal incident notifi cation tree to include out-of-band communication
methods and redundant alternatives.
c. Establish incident response team points of contact.
d. Write and disseminate incident handling procedures and guides.
e. Provide appropriate training.
f. Know the background, authority level and expertise level of IRT members and all other
personnel involv ...