Buy This and 39 Other Procedures

Computer & IT Procedures Manual
700 Pages - $495

The Security Incident Handling Procedure details the steps for reporting any actual or suspected IT security problem. The security incident policy also addresses security issues related to the safety, confidentiality, availability and integrity of information maintained on your company's IT system.

The Security Incident Handling Procedure applies to your company's remote data terminals, desktop and portable computers, data centers, and telecommunications facilities, as well as all data, hardware and IT personnel. (10 pages, 1485 words)

Activities Covered in the Security Incident Handling Procedure

• IT Incident Handling Preparation
• IT Incident Handling
• IT Incident Handling Review

References Used in the Security Incident Handling Procedure

• ISO/IEC 17799:2005-Information Technology-Code of Practice for Information Security Management, Clause 6.3 (Responding to Security Incidents and Malfunctions)
• Health Insurance Portability and Accountability Act of 1996 (HIPAA) Sarbanes-Oxley Act of 2002
• National Institute of Standards and Technology (NIST) Special Publication #800-61-Computer Security Incident Handling Guide (January, 2004)
• National Institute of Standards and Technology (NIST) Special Publications #800-66-Introductory Resource Guide for Implementing the HIPAA Security Rule (March, 2005)

Forms Included in the Security Incident Handling Procedure

• IT Incident Report Form
• IT Incident Response Form