Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition

What Is a Security Incident?

Before getting into the best way to respond to an incident, it is necessary to define a few terms. A security policy is a high-level description of how an organization defines a secure environment. This policy identifies the organization’s strategy for enforcing and maintaining a secure environment. It contains all the definitions of appropriate and inappropriate behaviors, requirements to protect sensitive resources, and any external requirements that must be satisfied, such as customer or vendor requirements, regulations, and legislation. A security control is a technical or nontechnical mechanism that enforces some aspect of the security policy. Far too many organizations have controls in place that do not specifically ...