IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
The IT Security Officer receives reports on security incidents. He
investigates and assesses the incident. He selects appropriate measures and
arranges for them to be implemented where this does not lie outside his
area of responsibility. If necessary, he assembles a Security Incident Team
or informs line management for the purpose of escalation.
Responsibility:
He is authorised to undertake an assessment of a security incident and to
escalate an incident up the management chain. In addition he has been
granted the financial and personnel resources (e.g. DM 100,000 and 2 manmonths)
which he may use to handle incidents independently.
Duty / information:
IT Security Management develops the "Policy for handling security
incidents". Therefore all IT Security Officers should be informed of their
tasks and responsibilities in the handling of security incidents.
IT Security Auditor
Task:
The IT Security Auditor can be assigned the task of checking the
effectiveness of the management system for security incidents at regular
intervals. He can also be required to participate in the evaluation of
security incidents.
Responsibility:
In agreement with line management, predefined checks can be initiated and
performed.
Duty / information:
This should be specified in the job description and in the "Policy for
handling security incidents".
Public Relations / Press Office
Task:
Where a serious security incident has occurred, no information should be
divulged to the public except through the Press Office. The aim here is not
to gloss over or play down the incident, but to present it in an objective
manner so as to avoid any loss of image as a consequence of conflicting
information.
Responsibility:
The Press Office must prepare information regarding the security incident
together with the technical experts and agree this with line management
prior to distribution.
Duty / information:
This should be specified in the job description and in the "Policy for
handling security incidents".
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000