NIST SP 800-86 Guide to Integrating Forensic Techniques into Incident Response 3.6 3.6.1 3.6.2 csc19 Incident Response
This guide from NIST discusses how important forensics can be for an organization during a cyber incident.
SEARCH RESULTS
Pager Duty – What is an incident postmortem? Incident Response
This article discusses how to conduct incident postmortems, and why they're important.
RSI Security – Best Practices for Testing of IR Plans Incident Response
This article describes how to build and regularly test your IR plan.
SANS Security Response Plan Policy 3.6 3.6.1 3.6.2 csc19 Incident Response
This is a policy template from SANS for incident response management.
SANS Whitepaper – From Events to Incidents Incident Response
This whitepaper from SANS provides basic nomenclature and examples for events and incidents.
SANS Whitepaper – Incident Handler’s Handbook 3.6 3.6.1 3.6.2 csc19 Incident Response
This SANS whitepaper details procedural incident response steps, supplemented by tips and tricks for use on Windows and UNIX platforms.
SANS Whitepaper – Incident Handling Annual Testing and Training 3.6 3.6.1 3.6.2 csc19 Incident Response
This SANS whitepaper discusses the need for annual incident handling testing and training.
State of Washington – Tabletop Exercises 3.6 3.6.1 3.6.2 csc19 Incident Response
This link from the State of Washington discusses examples of tabletop exercises that can be used during monthly meetings to help organizations prepare for cybersecurity events.
U. S. Election Assistance Commission – Cyber Incident Response Best Practices 3.6 3.6.1 3.6.2 csc19 Incident Response
This document provides an overview of items that election officials should take into consideration when developing these policies and plans. Additionally, it provides usable checklists and other resources designed to help develop more in-depth procedures for implementing cyber incident response policies and procedures.
YouTube – Building and Testing an Effective Incident Response Plan 3.6 3.6.1 3.6.2 csc19 Incident Response
This YouTube video covers key components of an effective incident response plan.