Computer Incident Response and Forensics Team Management

Part 1. Incident Response Team

This part provides a framework for directing and managing an Incident Response Team for your organization or agency. As the ITSG’s COBIT standard states:

“Management should establish a computer security incident handling capability to address security incidents by providing a centralized platform with sufficient expertise and equipped with rapid and secure communication facilities. Incident management responsibilities and procedures should be established to ensure an appropriate, effective and timely response to security incidents.”

The purpose of security incident response is to bring needed resources together in an organized manner to deal with an adverse event known as an “incident” that is related to the safety ...