Re: Major incident response procedure

S.C.O.R.E. - Security Consensus Operational Readiness Evaluation:
http://www.sans.org/score/

SANS Institute: Sample Incident Handling Forms:
http://www.sans.org/incidentforms/

You might also ensure that if you are US based that you have someone 
signed up on Infragard.org which has a FBI incident reporting form.

CERT/CC Incident Reporting Guidelines:
http://www.cert.org/tech_tips/incident_reporting.html

FBI Tips and Public Leads:
https://tips.fbi.gov/

CERT®/CC: How the FBI Investigates Computer Crime:
http://www.cert.org/tech_tips/FBI_investigates_crime.html


Smith, Jacqui wrote:

> > Hi, I wonder if anyone has guidelines on the above subject, specifically around 
> > communications to users and best practices.
> > Many thanks
> > Jacqui
> >
> >    
>
>
> __________________________________________________________________________
> This e-mail and the documents attached are confidential and intended 
> solely for the addressee; it may also be privileged. If you receive this 
> e-mail in error, please notify the sender immediately and destroy it.
> As its integrity cannot be secured on the Internet, the Atos Origin group 
> liability cannot be triggered for the message content. Although the 
> sender endeavours to maintain a computer virus-free network, the sender 
> does not warrant that this transmission is virus-free and will not be 
> liable for any damages resulting from any virus transmitted.
> __________________________________________________________________________
>
>