Incident Response: A Strategic Guide to Handling System and Network Security Breaches

Site Security Handbook

Status of this Memo

This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited.

Abstract

This handbook is a guide to developing computer security policies and procedures for sites that have systems on the Internet. The purpose of this handbook is to provide practical guidance to administrators trying to secure their information and services. The subjects covered include policy content and formation, a broad range of technical system and network security topics, and security incident response.

Table of Contents

1. Introduction

1.1 Purpose of this Work

1.2 Audience

1.3 Definitions

1.4 Related Work

1.5 Basic Approach

1.6 Risk Assessment ...