Incident Response Best Practices

While Incident Response (IR) is a crucial process in organizations today, a significant number of firms will treat it as an important security area only to be considered when an attack has occurred. However, this book has tried to show that IR is more than just a rarely used security tool; it is a set of security event preparation and mitigation procedures that might determine an organization's future. With the increased impacts of security breaches, incidents require accelerated resolution and highly effective management. Time lost in IR results in brands being tainted, customers and shareholder trust lost, and cascading internal negative effects on employees and workflow.

Therefore, the best chance an organization has when dealing with an incident is getting the response process right the first time. This chapter discusses some best practices to take forward and use in your approach to IR to achieve satisfactory results.

In this...