Managing Catastrophic Loss of Sensitive Data

Chapter 7. Evaluation and Response

Solutions in this chapter:

• Preliminary Determination

• Initial Assessment

• Team Escalation

• Information Gathering

• Classification

• Scope

• Length of Occurrence

• Severity Assessment

• Response Approach

• Containment

• Recovery

Summary

Introduction

One of the challenges of the response process is the evaluation and classification of events as they occur. Some events are the result of routine activity while others may be indicators of a potential incident requiring response. A clear and efficient process is important since most organizations will normally be detecting many incident candidates, the majority of which will be false positives. An ...