Information Security Fundamentals, 2nd Edition

178  ◾  Information Security Fundamentals

team), but in some cases, can be supplemented by external resources in the form of

contractors or other suppliers.

Responding to incidents describes the actions the organization takes to prevent or

contain the effect of an incident to the organization while it is occurring or shortly after

it has occurred. e range, scope, and breadth of the organizational response will vary

widely depending on the nature of the incident. Incident response may be as simple as

notifying users to avoid opening a specific type of e-mail message or as complicated as

having to implement the CoOP alternate processing location procedures that require

the relocation of staff and critical services to a facility that is on another ...