Incident response capabilities are used for monitoring security incidents, determining the magnitude of the threat, and responding promptly. If a security incident occurs, without an incident response capability in place, the incident will go unnoticed and the magnitude of harm associated with the incident will be significantly greater than if the incident were noted and corrected.

This Incident Response Policy Template includes the following sections:

• Default policy statements that define what the enterprise must do.
• Default procedures that define how the enterprise must do it.
• Baseline recommendations to customize the template to individual enterprise requirements.

Use this and the related templates to build an efficient and effective enterprise Security Policy.