APPENDIX
B
image
Computer Incident Response Plan (CIRP) Management Checklist
image
The purpose of this checklist is to provide an initial technology-agnostic assessment of a potential system compromise. Completion of this document is required prior to briefing senior management during an incident response.
image  Unusual activity in the access or system logs[Detail the type of activity, when noticed, and what makes it different from usual activity.]
  Recent changes ...

Get The Computer Incident Response Planning Handbook: Executable Plans for Protecting Information at Risk now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.