State of the Practice of Computer Security Incident Response Teams ...

Kruse and Heiser
In their book Computer Forensics, Incident Response Essentials, Kruse and Heiser have included
an appendix that provides details on “Internet Data Incident Response Guidelines”
[Kruse 02]. They cover the goals of incident response, roles and responsibilities of staff involved
in incident response, an incident severity chart, and information on incident handling
processes. They have provided several process flow charts for handling different types of incident
activity (Figures A-10, A-11, and A-12, pages 347, 348, and 349), a few of which have
been reproduced here. Appendix B provides an Incident Response Form template (pages 353-
361), which has also been included here.
CMU/SEI-2003-TR-001 195