
149
14Chapter
Incident Management
and Response
Incident management and response are the last step in risk management and the
final barrier to what may become an unmitigated disaster. e decisions that must
be made require accurate and timely information and will probably include many
of the following:
Is it actually an incident? ◾
What kind of incident is it? ◾
Is it a security incident? ◾
What is the severity level? ◾
Are there multiple events and impacts? ◾
Will they need triage? ◾
What is the most effective response? ◾
What immediate actions must be taken? ◾
Which incident response teams and other personnel must be mobilized? ◾
Who must be notified? ◾