Incident tracking
Many organizations utilize an IT trouble ticket tracking system for incidents. While tracking incidents in this manner works when there are few incidents and there is no need to automate incident response processes, organizations that have a more robust incident response capability that is in use a great deal may need to utilize an incident response platform to track and assist with the proper execution and documentation of the incident response process.
There are several commercial solutions available for tracking incidents. Some of these solutions can integrate with other toolsets so that a good deal of the process is automated. They may also incorporate playbooks into the platform so that incident response teams have immediate access and can work through the process, all the while recording their actions on the platform itself. One of the most significant advantages of a dedicated platform is the ability to track incidents over time and gain a sense of what types of attacks...