Effective Incident Response Team, The

Foreword

Computer security incidents and incident response are like fires and fire fighting.

Fires and computer security incidents can both be destructive and costly.

Small fires that are not effectively contained can turn into large fires that are more destructive and harder to control. Small computer security incidents that are not contained quickly or effectively can turn into large incidents that are more damaging and harder to contain.

Because fires and computer security incidents can be destructive and costly, we put effort into finding ways to prevent them in the first place. Think of the fire safety instruction that you probably received when you were in elementary school or when you read product usage warnings—don't play with matches, don't ...