The incident response plan
Having a good, practiced incident response plan will help to make the stressful situation of an incident manageable. It will help to minimize the disruption and prevent a step or task from being missed.
The NIST framework contains elements for response policies, processes and procedures, as well as information on how an incident should be run and managed from its beginning to its conclusion. The framework contains the following areas:
- Incident Response Procedures: This is the process and procedures are how incidents are handled and controlled until the incident is considered complete.
- Incident Response Information Sharing: This is the disclosing of incident response information to the public for the betterment of everyone. This could be through participation in a group, a blog post or other methods of disclosure.
- Incident Response Team Models: This is the formulation and components of the IR team. It can be based on skill sets, areas or...
