Information Security Handbook

Understanding what is important

As part of your preparation activities to conduct a successful incident response, you need to have a thorough understanding of what is important to your business/mission organization. If you have been following the guidance in this book to establish a successful information security program, then you have already worked with your stakeholders to determine key information, such as the following:

• Sensitive organizational data
• Sensitive information technology assets
• Your organization's risk appetite
• Allowable business process disruption
• How information systems are interconnected and communicating

If you haven't conducted these activities, then now is the time to engage your business and IT stakeholders and begin ...