Incident Response. (Information Sources).

Van Wyk & Fomo

Is your organization ready to respond to an IT security incident head-on? Will you be able to tell whether an incident is an attack or a glitch in the system? Do you know how to assess the possible damage from an incident? 'Incident Response. shows you how to answer questions like these and create a plan for exactly what to do before, during, and after an incident.

The authors of "Incident Response" draw on years of experience developing and taking part in incident response teams at the highest levels of government and business. They guide you through both the technical and administrative details of effective incident response planning as they describe:

"Incident response is often something that's thrown together as necessary when'there's a crisis," says Forno. "As a result, the response is often chaotic and not useful if the victim company wants to seek legal recourse against the alleged source of the attack. Incident response needs to be integrated with the total security and operations process for the organization--it can't be thrown together or operate in a vacuum!"

* What incident response is, and the problems of distinguishing real risk from perceived risk

* The different types of incident response teams, and advantages and disadvantages of each

* Planning and establishing an incident response team

* State of the Hack information about different types of attacks -

* Recommendations and details about available tools for incident response teams

* Resources available to incident response teams

www.oreilly.com