I am your virtual assistant, here to help you quickly and easily.
▲ Back to Top
Information Security Incident Management
The main objective of Incident Management is to define a process that allows for the proper handling of incidents through a framework that involves the following: incident management preparation activities, detection and analysis, containment, eradication and recovery, and post-incident activities.
STAGES
1. PLAN
2. DO
3. VERIFY
4. ACT
-
- Incident management preparation.
-
- Definition of detection and analysis, containment, eradication, and recovery procedures.
-
- Classification of incidents and their degree of severity.
-
- Definition of incident indicator elements.
-
- Detect and analyze incidents.
-
- Communicate and escalate the incidents.
-
- Contain, eradicate, and recover from an incident.
-
- Document security incidents.
-
- Tests and audits of incident management procedures.
-
- Define preventive and corrective actions based on the incidents that occurred.
OTRAS ETAPAS DEL MODELO
SGSI
SGSI
SGSI
SGSI
