Incident Response: A Strategic Guide to Handling System and Network Security Breaches

Overview of Incident Response

The next portion of this chapter provides an overview of the process of responding to incidents.

Initial Considerations

A successful incident response effort is closely linked to policy. This next subsection explains why and how.

Policy

Computer and information security begins and ends with policy. An information security policy is a high-level description of essential elements of computer and information security, including the basic requirements and infrastructure necessary for establishing security.A policy generally describes do’s and don’ts for users (and possibly system administrators) and specifies punishments for failure to observe the provisions of the policy. An effective policy also describes an organization’s ...