Penetration Testing: Protecting Networks and Systems

APPENDIX 4: INCIDENT MANAGEMENT

Concepts of incident management

Incident management is the practice of preparing for, preventing, detecting, reacting to and recovering from adverse events when they impact business operations, and then documenting lessons to be learned for the future.

The lessons learned from an incident may be valuable in protecting the organization from future incidents and enabling it to respond faster and more accurately, and minimizing the impact of the crisis. However, we see that many organizations do not learn from incidents; instead, they seem to rather hide or move on – avoiding the pain of examining what the conditions were that led up to the crisis. This approach may cause the organization to remain vulnerable to the ...