Solaris 8 Security

Handling Security Incidents

As in any other demanding situation, stay calm during and after a security incident. Do not exaggerate (and do not downplay, either) the already-done harm or possible dangers and consequences. This is the time when you will appreciate a hard copy of your carefully thought-out and defined security policy. It should contain guidelines on what you and others in your organization are supposed to do. The stated procedures should be uniformly followed, including notifying management and the administrator on duty (if there is one) using out-of-band communications (such as the phone). Log and timestamp your actions. These records might be very useful in case of legal action and when talking to law enforcement officials. If ...