Re: Got IDS installed, now need incident response plan document

[Mark Phillips <mark () probably co uk>]

On Fri, 16 May 2003, Bryan Morris wrote:

> Now my boss wants me to design an incident response plan.
>
> Does anyone know of any pre-canned documents I can use, so I don?t have to
> spend 2 weeks writing an incident response document from scratch?

Give SANS RR a whirl, lots of stuff there (I'm sure there's some example
policy frameworks too)

http://www.sans.org/rr/

Regards,

--Mark


-------------------------------------------------------------------------------
INTRUSION PREVENTION: READY FOR PRIME TIME?

IntruShield now offers unprecedented Intrusion IntelligenceTM capabilities 
- including intrusion identification, relevancy, direction, impact and analysis 
- enabling a path to prevention.

Download the latest white paper "Intrusion Prevention: Myths, Challenges, and Requirements" at: 
http://www.securityfocus.com/IntruVert-focus-ids2
-------------------------------------------------------------------------------