Security Management Strategies for the CIOIncident response best practices
Date: Jan 03, 2011
Expert Lenny Zeltser discusses incident response best practices including building and testing policies, creating incident response teams and much more.
Topics include:
- Can you speak to the maturity of incident response plans within the enterprise? (0:25)
- Where are enterprises most challeneged when it comes to incident response? (1:34)
- Is there an ideal skillset for an incident handler? (2:44)
- Who must sit on an incident response team? (3:43)
- How often should organizations review their incident response plans? (6:22)
- How often should organizations conduct a dry run of their incident response plans? (7:55)
- Can you talk about the NIST framework and whether it should be customized or not? (9:56)
- Where do companies make the most mistakes after an incident has occured? (11:55)
About the expert:
Lenny Zeltser is the New York security consulting leader at Savvis Inc. He is also a senior faculty member at SANS Institute, where he teaches a course on reverse-engineering malware.
