Incident Handling and Response and Plans and Guidelines

Recent resources tagged with Incident Handling and Response and Plans and Guidelines.

Security Task Force Strategic Plan 2006-2007 : Making Progress on Data Protection, Risk Assessment, Incident Response and Business Continuity

Added by the EDUCAUSE Librarian
Title:Security Task Force Strategic Plan 2006-2007 : Making Progress on Data Protection, Risk Assessment, Incident Response and Business Continuity (ID: CSD4980)
Origin:Contributed by the Security Task Force (06/20/2007)
Type:Plans and Guidelines
Abstract:

This 2006-2007 strategic plan is intended to identify a few key priorities for the next year that will guide and direct the activities of the EDUCAUSE/Internet2 Security Task Force.

View this resource:

Yale University Data Breach Containment Procedure

Added by the EDUCAUSE Librarian
Title:Yale University Data Breach Containment Procedure (ID: CSD4789)
Origin:Contributed by the Security Task Force (2006)
Type:Plans and Guidelines
Abstract:Disclosure Notification Flow Chart for the Yale University Data Breach Containment Procedure.
View this resource:

Organizational Models for Computer Security Incident Response Teams (CSIRTs)

Added by the EDUCAUSE Librarian
Title:Organizational Models for Computer Security Incident Response Teams (CSIRTs) (ID: CSD3846)
Author(s):Georgia Killcrece (Carnegie Mellon University), Robin Ruefle (Carnegie Mellon University), and Mark Zajicek (Carnegie Mellon University)
Source:Carnegie Mellon Software Engineering Institute
Origin:Contributed by Organizations or Campuses (2003)
Type:Plans and Guidelines
Abstract:When a computer security attack on an organization occurs, an intrusion is recognized, or some other kind of computer security incident occurs, it is critical for the organization to have a fast and effective means of responding. One method of addressing this need is to establish a formal incident response capability or a Computer Security Incident Response Team (CSIRT). When an incident occurs, the goal of the CSIRT is to control and minimize any damage, preserve evidence, provide quick and efficient recovery, prevent similar future events, and gain insight into threats against the organization. This handbook describes different organizational models for implementing incident handling capabilities, including each model's advantages and disadvantages and the kinds of incident management services that best fit with it.
View this resource: