Incident Response Management
Facilitated a training for cybersafe Foundation in partnership with UK Aid
What is incident management and response?
incident management is defined as the “capability to effectively manage unexpected disruptive events with the objective of minimizing impacts and maintaining or restoring normal operations within defined time limits.”1 a viable incident management capability requires the allocation of human and material resources to support business operations to assure continuity of the minimum of enterprise operations and contain security breaches in accordance with the enterprise risk strategy. incident management involves all of the actions taken prior to (including testing and planning), during, and after an information security incident occurs. the actions taken should be designed to mitigate the impact of an incident with the following goals in mind:
provide an effective means of addressing the situation in such a way that it minimizes the impact to the enterprise.
provide management with sufficient information to decide on appropriate courses of action.
maintain or restore continuity of enterprise services.
provide a defense against subsequent attacks. • provide additional deterrence through the use of technology, investigation and prosecution.