The current state of the incident response capabilities

Every organization has some sort of incident management capability, either structured or unstructured. The information security manager must determine the current state of this capability. This will help them understand the areas for further improvement. The information security manager can determine the current state in any of the following ways:

• The current state can be determined by surveying senior management, business managers, and IT employees. This will help them understand the perception and focus of the group on incident management capabilities.
• The current state can also be determined by way of self-assessment. This can be done by comparing current processes with some standard criteria. However, in this method, the views of the other stakeholders are ignored, and this can be a major challenge.
• The current state can be determined by way of external assessment or audit. This is the most comprehensive...