IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection of Generic Components Handling of security incidents
_________________________________________________________________________________________
Recommended Countermeasures (S)
For the implementation of IT baseline protection, selection of the required packages of safeguards
("modules"), as described in Sections 2.3 and 2.4, is recommended.
To establish an effective system for handling security incidents, a number of steps must be taken.
These steps are described in safeguard S 6.58 Establishment of a management system for handling
security incidents and are explained in the safeguards which follow it. Hence it is best to start with
implementation of safeguard S 6.58.
The safeguards relating to the area of "Handling of security incidents" are listed below.
Contingency Planning
- S 6.58 (1) Establishment of a management system for handling security incidents
- S 6.59 (1) Specification of responsibilities for dealing with security incidents
- S 6.60 (1) Procedural rules and reporting channels for security incidents
- S 6.61 (1) Escalation strategy for security incidents
- S 6.62 (1) Specifying priorities for handling security incidents
- S 6.63 (1) Investigation and assessment of a security incident
- S 6.64 (1) Remedial action in connection with security incidents
- S 6.65 (1) Notification of parties affected
- S 6.66 (2) Evaluation of security incidents
- S 6.67 (2) Use of detection measures for security incidents (optional)
- S 6.68 (2) Testing the effectiveness of the management system for the handling of security
incidents
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000
�