Emergency Response Process

At a very minimum the process needs to cover the following:

• Disconnect the system.
• Who to contact and how?
• Who will analyze what?
• How do we restore service?
• What to do afterward?

Adopted from Protect Your Windows Network : From Perimeter to Data by Jesper M. Johansson, Steve Riley.