Chapter 11: Practical Aspects of Information Security Incident Management
In this chapter, we will discuss the practical aspects of information security incident management. We will start by understanding the importance of building business resilient processes and the practical aspects of the business continuity plan and the disaster recovery plan. We will discuss the business continuity and disaster recovery process and learn about various aspects of testing the incident response, business continuity, and disaster continuity plans.
The following topics will be covered in this chapter:
- Business continuity and disaster recovery procedures
- Testing incident response, business continuity, and disaster continuity
- Executing a response and recovery plan
- Post-incident activities and investigation
Let's understand each of these topics in detail.