- Training
- Training Live Events
- Training Without Travel
- SANS Courses
- Certified Instructors
- Career Roadmap
- Training Calendars
- SANS @Home
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- SANS Onsite
- SANS SelfStudy
- SANS Partnership Series
- SANS Workshop Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- group discounts
- Certification
- Resources
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
the most trusted source for computer security training, certification and research
Corporate Incident Handling Guidelines
- Abstract
- Incidents are an unfortunate fact of life in any systems environment. They can be extremely visible and disruptive (e.g.: widespread virus outbreaks) or entirely unnoticed but extremely damaging (e.g.: loss of confidential growth plans). There is a vast amount of information available to help you deal with most types, but if you have done no preparation you will struggle to find it when you need it at short notice. Incidents are also likely to occur at the least convenient time when the right people are not available. If you are a large multinational corporation without a large security function, this paper will help you approach some of the common problems in preparing incident handling procedures.