262 ◾ Information Security Fundamentals
use, checklists, and forms to be used in the response. ese procedures should be
as detailed as possible—listing software and how-to’s for each event that might
occur. Utilizing these procedures will help reduce stress on the team, reduce train-
ing, and provide continuity across the entire organization. Procedures should
always be mappable to the policy so they can be considered as one unit with two
parts.
Again, consideration for the size of the organization must be given in devel-
oping a team. Multinational organizations suffer from regional misunderstanding
(Red is good, yes?), whereas small organizations have few qualified people, few
policies/procedures, less capital for incident management, and a ...