Information security incident management

Abstract

The modern requirements and the best practices in the field of Information Security (IS) Incident Management Process (ISIMP) are analyzed. "IS event" and "IS incident" terms, being used for ISIMP, have been defined. An approach to ISIMP development has been created. According to this approach ISIMP processes are described. As an example the « Vulnerabilities, IS events and incidents detection and notification» joint process is examined in detail.