Develop and Implement a Security Incident Management Program – Phase 2: Operate

Author(s): Celine Gravelines, Logan Rohde

Operate with efficiency and effectiveness as new incidents are handled. The activities in this phase will enable you to:

  • Streamline the incident handling process based on best practices.
  • Develop specific incident runbooks to correspond with relevant incidents in order to quickly identify the response process and eliminate ambiguity when handled by different individuals.
  • Perform effective post-incident analysis to learn from incidents and prevent reoccurrences.