Incident Response Procedures
The most effective method to handle an incident is to lay down a structured process for incident management.
Figure 10.4: The preparedness of the incident management team
A well-defined incident management process will yield far better results in reducing business disruptions compared to unorganized incident management processes.
The Outcome of Incident Management
A security manager should understand that good incident management will have the following outcomes:
- The organization can effectively handle any unanticipated events.
- The organization will have robust detection techniques and processes for the timely identification of incidents.
- The organization will have well-defined criteria for defining the severity of incidents and an appropriate escalation process
- The availability of experienced and well-trained staff for effective handling of incidents
- The organization will have proactive processes...
