While vulnerabilities to intrusions in organisations are on the increase, it becomes vital that organizations are able to handle security incidents and undertake security/forensic investigation. These investigations are necessary to identify potential weaknesses in the security and prevent future incidents or to deter future attackers. We performed several case studies to explore what factors have influenced managers in organizations in their decisions not to perform security/forensic investigations. The study identified that not having prior planning for any incident handling and being unaware of the importance to do so are major inhibitors to an organization’s ability in reacting to security incidents.
['Tobias Ruighaver', 'C. C. Terence Tan', 'Atif Ahmad']
Incident Handling: Where the need for planning is often not recognised