Designing a HIPAA-Compliant Security Operations Center: A Guide to Detecting and Responding to Healthcare Breaches and Events

© Eric C. Thompson 2020

E. C. ThompsonDesigning a HIPAA-Compliant Security Operations Centerhttps://doi.org/10.1007/978-1-4842-5608-4_6

6. Incident Response

Eric C. Thompson¹ 

(1)

Dekalb, IL, USA

 

Incident response is a critical component of security operations. When events are escalated to incident status, the team needs to act as quickly as possible without jeopardizing the quality of the response. The details of building and maintaining a program are detailed in Cybersecurity Incident Response¹ so an in-depth discussion will not take place here. What this chapter focuses on are the processes the security operations team or program should conduct to understand the incident and prepare for engaging forensic specialists if necessary. The starting ...