Incident Response Procedures

The most effective method to handle an incident is to lay down a structured process for incident management.

Figure 10.4: The preparedness of the incident management team

A well-defined incident management process will yield far better results in reducing business disruptions compared to unorganized incident management processes.

The Outcome of Incident Management

A security manager should understand that good incident management will have the following outcomes:

• The organization can effectively handle any unanticipated events.
• The organization will have robust detection techniques and processes for the timely identification of incidents.
• The organization will have well-defined criteria for defining the severity of incidents and an appropriate escalation process
• The availability of experienced and well-trained staff for effective handling of incidents
• The organization will have proactive processes...