Information Security Handbook

Components of an incident response plan

As with most concepts presented in this book, ultimately, the incident response plan is a business plan and must be designed and implemented with your organization's mission and business in mind. Essentially, the purpose of your incident response plan is to ensure that your organization can continue operating and providing services.

The incident response plan comprises many phases, which make up the overall incident response program life cycle. This life cycle includes:

• Initial activities that initiate, plan, and implement the incident response capability, including:
  • Ongoing dialog with the organization's IT and business stakeholders to ensure that the incident response capability meets business objectives ...