Re: Computer Incident Response Policy and Team

["George M. Jones" <gjones () uu net>]

On Tue, 11 Apr 2000, Alex Lim wrote:

> Hi, I am sorry if this is out of topic but I am quite desparate for
> advice. I need to setup the CIRP and CIRT urgently for my company and
> would be grateful if anyone can advise me on where to get guidelines for
> them. 
>
> Any advice would be deeply appreciated.

Your best bet would probably be to attend the upcoming FIRST 
conference (http://www.first.org) in Chicago and learn from 
the people who are doing it.

Your next best bet would be to pick up the excellent SANS
publication on incident handling per se at

    http://www.sans.org/newlook/publications/incident_handling.htm

Lastly, there are a number of organizations, including CERT
(http://www.cert.org) that do/did cert team training.

---George Jones