Re: Got IDS installed, now need incident response plan document

From: Mark Phillips <mark(at)probably.co.uk>
Date: Fri May 16 2003 - 08:58:59 EDT

On Fri, 16 May 2003, Bryan Morris wrote:

> Now my boss wants me to design an incident response plan.
>
> Does anyone know of any pre-canned documents I can use, so I don’t have to
> spend 2 weeks writing an incident response document from scratch?

Give SANS RR a whirl, lots of stuff there (I'm sure there's some example policy frameworks too)

http://www.sans.org/rr/

Regards,

--Mark

---

INTRUSION PREVENTION: READY FOR PRIME TIME? IntruShield now offers unprecedented Intrusion IntelligenceTM capabilities - including intrusion identification, relevancy, direction, impact and analysis - enabling a path to prevention.

Download the latest white paper "Intrusion Prevention: Myths, Challenges, and Requirements" at: http://www.securityfocus.com/IntruVert-focus-ids2

---

Received on Fri May 16 10:52:01 2003