Hands-On Security in DevOps

Preparation

The preparation is the most critical part of the incident process. We cannot completely predict or avoid any security incident, but we can plan to have full preparation for a security incident. The preparation covers all the required processes, analysis tools, security technologies, and team resources to prevent and handle a security incident. Preparation not only helps in preventing security incidents but also minimizing the damage caused during a security incident.

Here are some suggested security practices to be performed in the incident response preparation phase:

• Incident handler communication plan
• Incident analysis hardware and software tools (refer to the section on incident forensics)
• Existing networking diagram ...