Incident response procedure
The most effective way to handle an incident is to lay down a structured process for incident management. On a lighter note, the following figure indicates the preparedness of the incident management team:
Figure 10.1 – Incident team
A well-defined incident management process will yield far better results in reducing business disruptions compared to unorganized incident management processes.
The outcome of incident management
The security manager should understand that good incident management will have the following outcome:
- The organization can effectively handle any unanticipated events.
- The organization will have robust detection techniques and processes for identifying incidents.
- The organization will have well-defined criteria for defining the severity of the incident and the appropriate escalation process.
- The availability of experienced and well-trained staff to effectively handle the...
