Microsoft® Windows® Security Resource Kit, Second Edition

Best Practices

• Employ diligent planning to alleviate uncertainty when responding to incidents. Because time is of the essence when handling incidents, it is critical to do as much work up front as possible. This work includes the following:

  • Implementing preventative measures described throughout this book

  • Implementing policies that support incident response

  • Training all staff in their role in security

  • Selecting the people who will be involved in incident response and designating the roles each will play

  • Collecting and maintaining incident handling guidelines

  • Assembling a comprehensive and accurate contact sheet

  In addition, difficult scenarios should be discussed by the incident response team and management to establish boundaries and predefine response ...