A security incident response system consists of several steps
and processes that your organization should document. There are
many event types that you may be come across, and each one will
have a number of responses to consider. Any security incidents
will, at their root, be the actions of a person or group of
people. These incidents can have varying degrees of severity,
and the first step in a response is to decide how serious the
incident is for your organization. Generally, incidents fall
into three categories: - Ordinary or normal: These do not affect
your organization's operations, nor do they require notification
of management. They can be contained and dealt with within the
security group or help-desk function in your IT department. -
Elevated or serious: These can affect operations, and they will
require an implementation in order to be dealt with. Management
will have to be notified and perhaps even involved in the
resolution. - Emergency: These can affect people's health and
well-being, breach your