IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
Agency/company management
Task:
In cases of serious security incidents, management should be informed and
if necessary should be required to make decisions.
Responsibility:
In its capacity as having overall responsibility, it can delegate
responsibility to the above-mentioned groups. In addition it can call in the
police and criminal prosecution authorities where criminal activity is
suspected.
Duty / information:
Management must approve the "Policy for handling security incidents" and
the escalation plans which are based thereon. As part of this, line
management is also informed of its role in the handling of security
incidents.
Security Incident Team
In addition to the above groups, where a difficult or serious security incident
has occurred it may be necessary to invoke a Security Incident Team for a
limited period to handle the incident. This is normally initiated by the IT
Security Officer, who may involve line management in advance.
Even if the Security Incident Team only meets for a specific security incident,
to ensure as fast a response as possible to the security incident, its members
must be appointed and fully briefed of their assigned tasks in advance. The
members of the Security Incident Team should be authorised to perform their
assigned tasks on their own authority. The procedures necessary for this must
be specified in writing and authorised by management. In particular, the
person who heads the team must be specified.
Depending on the type of security incident, the members of a Security
Incident Team can include the following, for example:
- Agency/company management
- IT Security Management / IT Security Officer
- Head of IT section
- Press office
- Data privacy officer
- Legal adviser
- Staff council / works council
If necessary, additional parties/departments must be called in, e.g.
- the specialist departments concerned (head of department, IT Procedures
Officer),
- IT Administrators,
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000
Appoint members and
determine tasks