Computer Incident Response and Product Security (Paperback)

Description

Learn how to build a Security Incident Response team with guidance from a leading SIRT from Cisco

• Gain insight into the best practices of one of the foremost incident response teams
• Master your plan for building a SIRT (Security Incidence Response Team) with detailed guidelines and expert advice for incident handling and response
• Review legal issues from a variety of national perspectives, and consider practical aspects of coordination with other organizations

Network Security Incident Response provides practical guidelines for building an SIRT team as well offering advice on responding to actual incidents. For many companies, incident response is new territory. Some companies do not have an incidence response team at all. Some would like to have one but need guidance to start and others would like to improve existing practices. Today, there are only a handful of organizations that do have mature and experienced teams. For that reason this book is structured to provide help in both creating and running an effective Security Incident Response Team. Organizations who are evaluating whether to invest in a SIRT or who are just getting started building one will find the information in this book to be invaluable in helping them understand the nature of the threats, justifying resources, and building effective IR (Incidence Response) teams. Established IR teams will also benefit from the best practices highlighted in building IR teams as well as information on the current state of incident response handling, incident coordination, and legal issues. Written by a leading SIRT (Security Incident Response Team) from Cisco, the expertise and guidance provided in this book will serve as the blueprint for successful incidence response planning for most any organization.

描述

學習如何建立一個安全事件回應團隊，並獲得思科領先的SIRT的指導。

- 瞭解最佳實踐，來自一個頂尖的事件回應團隊。
- 通過詳細的指南和專家建議，掌握建立SIRT（安全事件回應團隊）的計劃，以及事件處理和回應。
- 從各種國家的角度審查法律問題，並考慮與其他組織協調的實際方面。

《網絡安全事件回應》提供了建立SIRT團隊的實用指南，並提供應對實際事件的建議。對於許多公司來說，事件回應是新的領域。有些公司根本沒有事件回應團隊。有些公司希望有一個團隊，但需要指導來開始，而其他公司則希望改進現有的做法。目前，只有少數組織擁有成熟且經驗豐富的團隊。因此，本書的結構旨在為創建和運營有效的安全事件回應團隊提供幫助。正在評估是否投資於SIRT或剛開始建立SIRT的組織將發現本書中的信息對於幫助他們理解威脅的性質、合理化資源和建立有效的IR（事件回應）團隊非常有價值。成熟的IR團隊也將從建立IR團隊的最佳實踐以及有關當前事件回應處理、事件協調和法律問題的信息中受益。本書由思科領先的SIRT（安全事件回應團隊）撰寫，提供的專業知識和指導將成為大多數組織成功的事件回應計劃的藍圖。