Risk and incident management – getting started
Peter D. Stephenson · Computer Fraud & Security · 2004
Over the past several months we have been discussing some rather advanced concepts in risk analysis and management. We've addressed the FARES (Forensic Analysis of Risks in Enterprise Systems) process, End-to-End Digital Investigation (EEDI) and a formal approach to incident post mortems. While much in these discussions may have seemed theoretical, virtually all of the material presented has been field tested by practitioners in real situations. Those field tests have produced excellent results.