Incident Response & Computer Forensics, 2nd Ed., 2nd Edition

CHAPTER 2

Introduction to the Incident Response Process

 

In our experience, we have responded to the gamut of incidents: criminal incidents, incidents that involved civil litigation, and incidents that disrupted business but were not actionable (cases where criminal or civil action was improbable). We also have developed incident response plans for numerous organizations, ranging from financial services institutions to companies that produce mainstream products. During our various responses and program development engagements, we sought to design an incident response process that will work with each type of incident you may encounter. We believe that the incident response process we introduce in this chapter meets the needs of any organization ...