Information Security Incident Management Process

摘要

The modem requirements and the best practices in the field of Information Security (IS) Incident Management Process (ISIMP) are analyzed. "IS event" and "IS incident" terms, being used for ISIMP, have been defined. An approach to ISIMP development has been created. According to this approach ISIMP processes are described. As an example the ((Vulnerabilities, IS events and incidents detection and notification? joint process is examined in detail.