Data Breach Preparation and Response

Chapter 3

Developing a Computer Security Incident Response Plan

Kevvie Fowler

Abstract

This chapter will leverage the output of Chapter 2 and guide the reader through developing a tailored CSIR plan for their organization.

Keywords

Standard Operating Procedures; Management commitment; Incident assessment; Incident classification; Incident severity; Self-Breach detection; Security monitoring; Threat intelligence; Evidence retention; CSIR Plan testing; CSIR Plan metrics

Contents

Introduction

Developing the Data Breach Response Policy

CSIR Plan Document Elements

CSIR Plan Validation and Testing

CSIR Plan Document Validation

CSIR Plan Testing

CSIR Plan Performance Metrics

Summary

Introduction

It is ironic that the most time-consuming part ...