Incident analysis and recovery
Peter D. Stephenson · Computer Fraud & Security · 2005
We have been discussing the management process for information security incidents. While we have emphasized that these incidents may, often, be prevented by taking a series of proactive steps such as risk management, inevitably those steps will fail and there will be an incident. When that happens, your proactive measures as well as solid preparation should help minimize the severity of the incident. It is axiomatic that our preparatory measures must be planned and executed to minimize the number and severity of such incidents.