Incident Response Management
Incident response management is the process of quickly identifying, managing, and resolving security incidents to minimize damage and restore normal operations. An incident response management policy is very important in minimizing damage from an incident and in recovering the operations at the earliest possible juncture. The most important factor in improving the incident response process is regularly testing the incident response plan through simulations.
Roles and responsibilities for incident management should be clearly defined. The following are some of the important functions relating to incident management:
- A coordinator should liaise with process owners
- An executive officer should oversee the incident response capability
- Security experts should investigate the incident
- A public relations team should manage the reputation of both internal and external stakeholders
The incident reporting procedure should be clearly defined...
