Incident Response Plan

Getting Started

As mentioned previously, an early task for the CPMT is to form the IR planning team (IRPT), which will begin work by developing policy to define the team’s operations, articulate the organization’s response to various types of incidents, and advise users how to contribute to the organization’s effective response, rather than contributing to the problem at hand. The IRPT then forms the computer security incident response team (CSIRT) An IR team composed of technical IT, managerial IT, and InfoSec professionals who are prepared to detect, react to, and recover from an incident. The CSIRT may include members of the IRPT. . Some key members of the IRPT may be part of the CSIRT. You will learn more about the CSIRT’s roles and composition later in this section. Figure 10-6 illustrates the NIST incident response life cycle.

Figure 10-6. NIST Incident Response Life Cycle

Getting Started

Source: NIST Special Publication 800-61, Rev. 2: The Computer Security Incident Handling Guide. Listen webReader by ReadSpeaker

• Settings
• Reading LanguageAmerican English - Female - Selected American English - Male Australian English British English
• Read on Hover
• Enlarge Text
• Text Mode
• Page Mask
• Download mp3
• Help

Open/close toolbar