Incident Handling

An incident handling policy and procedures actions plan deals with intrusions and other security-related events. Cyber Watch adheres to the industry standard model created by the SANS Institute. The model was developed from the Computer Incident Response Guidebook from the Department of Defense.

The Process

The incident handling process outlines systematic procedures that should be followed when responding to security-related incidents. The process consists of 6 phases, which include:


• Preparation • Detection • Containment • Eradication • Recovery • Follow-up •

 

 




© 2001- Cyber Watch, Inc.