Re: Security Incident Handling Procedure

[lists educ <educlist () GMAIL COM>]

Hi Tim,

Please find below some links that you may find helpful:

http://csrc.nist.gov/publications/nistpubs/800-61/sp800-61.pdf
http://www.auscert.org.au/render.html?it=4323
http://www.auscert.org.au/render.html?it=1972

At the bottom of the following page you will also find some relevant
documents:

http://www.auscert.org.au/render.html?it=3896

Please let me know if you need something more specific.
Regards,

  Viviani
--------------------------------------------------------------------------
 Viviani Paz
 Security Assurance Manager
 AusCERT (Australian Computer Emergency Response Team)
 Phone: +61 7 3365 4290                  Email: viviani () auscert org au
 Incident Response: +61 7 3365 4417      Email: auscert () auscert org au
 Fax:   +61 7 3365 7031                  Web: http://www.auscert.org.au
--------------------------------------------------------------------------



On 3/24/06, Tim Lane <tlane () scu edu au> wrote:
> Hi Folks,
>
> I am developing a written procedure "IT Security Incident Handling" to be
> followed in the event of an incident (mainly virus outbreak or hacking
> event).
>
> Just wondered if anyone has already been down this track and has some
> developed procedure that they might like to share???
>
> Thanks,
>
> Tim
>
>  Tim Lane
> Information Security Program Manager
>
> Information Technology and Telecommunication Services
> Southern Cross University
> PO Box 157 Lismore NSW 2480
>
> (02 6620 3290    7    02 6620 3033    - tlane () scu edu au
> 8 http://www.scu.edu.au