Incident Response Management
An incident response management policy is very important in minimizing damage from an incident and in recovering the operations at the earliest possible juncture.
Roles and responsibilities for incident management should be clearly defined. The following are some of the important functions relating to incident management:
- A coordinator should liaison with process owners
- An executive officer should oversee the incident response capability
- Security experts should investigate the incident
- A public relations team should manage the reputation of both internal and external stakeholders
The incident reporting procedure should be clearly defined, documented, and made available to all employees and relevant stakeholders.
Teams of experts should be available to investigate the incident to arrive at the root cause for preventive action. To address incidents properly, it is necessary to collect evidence as soon as possible after the...