Develop and Implement a Security Incident Management Program – Phase 3: Maintain and Optimize

Author(s): Celine Gravelines, Logan Rohde

Maintain and optimize the incident management process by tracking metrics, performing tabletop exercises, and leveraging best practices. The activities in this phase will enable you to:

  • Track key metrics to see trends and pain points over time.
  • Support future security investments with a formalized incident metrics program.
  • Engage users as you deploy and revamp your corporate incident management processes.
  • Promote continuous improvement through the use of tabletop exercises.