Cart
0
Product
Products
(empty)
No products
To be determined
Shipping
$0.00
Total
Product successfully added to your shopping cart
Quantity
Total
There are 0 items in your cart.
There is 1 item in your cart.
Total products
Total shipping
To be determined
Total
Reduced price!
View larger
View larger
INCITS/ISO/IEC TR 18044
New product
INCITS/ISO/IEC TR 18044 2004 Edition, January 1, 2004 Information technology – Security techniques - Information security incident management (TECHNICAL REPORT)
More info
Description / Abstract:
This Type 3 Technical Report (TR) provides advice and guidance on information security incident management for information security managers, and information system, service and network managers.
This TR contains 11 clauses and is organized in the following manner. Clause 1 describes the scope and is followed by a list of references in Clause 2 and terms and definitions in Clause 3. Clause 4 provides some background to information security incident management, and that is followed by a summary of the benefits and key issues in Clause 5. Examples of information security incidents and their causes are then provided in Clause 6. The planning and preparation for information security incident management, including document production, is then described in Clause 7. The operational use of the information security incident management scheme is described in Clause 8. The review phase of information security management, including the identification of lessons learnt and improvements to security and the information security incident management scheme, is described in Clause 9. The improvement phase, i.e. making identified improvements to security and the information security incident management scheme, is described in Clause 10. Finally, the TR concludes with a short summary in Clause 11. Annex A contains example information security event and incident report forms, and Annex B contains some example outline guidelines for assessing the adverse consequences of information security incidents, for inclusion in the reporting forms. The Annexes are followed by the Bibliography.
This TR contains 11 clauses and is organized in the following manner. Clause 1 describes the scope and is followed by a list of references in Clause 2 and terms and definitions in Clause 3. Clause 4 provides some background to information security incident management, and that is followed by a summary of the benefits and key issues in Clause 5. Examples of information security incidents and their causes are then provided in Clause 6. The planning and preparation for information security incident management, including document production, is then described in Clause 7. The operational use of the information security incident management scheme is described in Clause 8. The review phase of information security management, including the identification of lessons learnt and improvements to security and the information security incident management scheme, is described in Clause 9. The improvement phase, i.e. making identified improvements to security and the information security incident management scheme, is described in Clause 10. Finally, the TR concludes with a short summary in Clause 11. Annex A contains example information security event and incident report forms, and Annex B contains some example outline guidelines for assessing the adverse consequences of information security incidents, for inclusion in the reporting forms. The Annexes are followed by the Bibliography.