Enterprise Incident Response Policy

This tool includes three sample policies that can be used by organizations to develop a consistent process for responding to and recovering from security incidents. 

Although the approach to all incidents is similar, the actual steps taken to address specific incidents may differ depending on the actual nature of the incident. Any incidents requiring the need to exercise the disaster recovery plan should be managed through a disaster recovery process. An incident that does not meet the requirements for launching an incident response program should be referred to the normal remediation and compliance processes.