Carnegie Mellon University – Incident Response Plan 3.6 3.6.1 3.6.2 csc19 Incident Response
This resource from CMU provides an example procedure for how to respond to information security incidents.
This resource from CMU provides an example procedure for how to respond to information security incidents.
This white paper is about tabletop exercises can be used to help cybersecurity teams develop tactical strategies for securing their systems.
In this article, Kroll provides a high-level view of how to build an IRP and the types of questions you will want to address as you begin planning.
This NIST Special Publication focuses on providing plans and procedures to facilitate resuming normal business operations as quickly as possible during a cybersecurity event.
This NIST Special Publication offers guidance for incident response by identifying best practices and other recommendations.
This guide from NIST discusses how important forensics can be for an organization during a cyber incident.
This is a policy template from SANS for incident response management.
This SANS whitepaper details procedural incident response steps, supplemented by tips and tricks for use on Windows and UNIX platforms.
This SANS whitepaper discusses the need for annual incident handling testing and training.
This link from the State of Washington discusses examples of tabletop exercises that can be used during monthly meetings to help organizations prepare for cybersecurity events.