RE: Incident management policy

SANS has a really good step by step process defined in "Computer Security
Incident Handling:  An Action Plan For Dealing With Intrusions, Cyber Theft,
and Other Security-Related Events".  You can find this in the SANS Library
section.  I remember it costing like $30.  

The book "Incident Response: A Strategic Guide to Handling System and
Network Security Breaches" may also be of use to you.

There are many others, but I am short on time.  These two have a everything
that you've asked for in them though...

-Brad Bemis 

-----Original Message-----
From: Simone [mailto:g_0_k_u_r_a_k_u@yahoo.it] 
Sent: Friday, June 17, 2005 9:27 AM
To: security-management@securityfocus.com
Subject: Incident management policy

Hello everyone,

I'm about to work creating an incident management policy for a
government-dependent office.
My focus at this stage is on the management process, and I need to write
down:
    0. A set of duty related to incident management and the people involved
(the main problem is about the top-level management of the process)
    1. A definition of "incident" which should be understandable for people
not involved in security
    2. A form for incident management which should be easy to fill and
manage Could someone help me in finding some good
whitepaper/handbook/presentation on the topic?

Thanx in advance,
G0k




        

        
                
___________________________________
Yahoo! Mail: gratis 1GB per i messaggi e allegati da 10MB
http://mail.yahoo.it