Components of an incident response plan
As with most concepts presented in this book, ultimately, the incident response plan is a business plan and must be designed and implemented with your organization's mission and business in mind. Essentially, the purpose of your incident response plan is to ensure that your organization can continue operating and providing services.
The incident response plan comprises many phases, which make up the overall incident response program life cycle. This life cycle includes:
- Initial activities that initiate, plan, and implement the incident response capability, including:
- Ongoing dialog with the organization's IT and business stakeholders to ensure that the incident response capability meets business objectives
- The necessary planning to establish the organization's incident response capability as a functioning business program
- Establishment of a repeated life cycle that will characterize the incident response process for the organization
- The repeatable operational...
