Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition

The Incident Response Process

As a security professional, you are responsible for reducing the chance of a security breach or incident to the lowest acceptable level. However, no matter how hard you try, the reality is that you are only reducing the chance of a security incident, not eliminating it. So, as a well-prepared professional, you must plan how you will react when a security incident does occur. This planning will reap benefits by allowing you to proactively respond when incidents occur as opposed to reacting to whatever happens. Proper security incident response will determine whether you deal with an incident efficiently and completely or the incident gets worse and out of control.

When planning incident response, keep in mind that ...