FORMATION OF AN INFORMATION SECURITY INCIDENT RESPONSE TEAM
Abstract
When responding to information security insiders, the available factors are the correct handling of documents that correspond to the information security insiders base. When applying warning measures, it is to reduce the negative consequences of responding to information security incidents. At the same time, the measure that will be taken after the complete elimination of the incident (changing the policy of frustration, closing off non-Good resusrs, etc.k) implementation is necessary. It is also important to carry out preventive work with employees.
References
- E. Eugene Schultz, Russell Shumway, Phyllis Schneck “Incident Response: A Strategic Guide to Handling System and Network Security Breaches” 2012
- N. K. McCarthy and Matthew Todd “The Incident Response and Computer Forensics Handbook” 2016
- Richard Bejtlich “The Practice of Network Security Monitoring: Understanding Incident Detection and Response” 2020
- Lee Brotherston and Amanda Berlin “Defensive Security Handbook: Best Practices for Securing Infrastructure”2022