The Computer Incident Response Planning Handbook: Executable Plans for Protecting Information at Risk

CHAPTER

9

Your Malware Outbreak CIRP: Plan Execution

A malware crisis is one of the most difficult incidents to deal with. You have an active “agent” competing against you. It has the element of surprise and it has the initiative. If it is a zero-day, most of your defenses are useless. Little knowledge regarding this opponent is readily available. You have to make quick decisions with little information. There are few resources that you can reach out to for help, because they too are reacting to what is going on.

I believe that malware is going ...