Worm Infection Response

Cyber Incident

via cyber.amoreswebdesign.com_AmoresWebDesign -Cyber BlogAmoresWebDesign -Cyber Blog » Cyber Security & Warfare Blog.

Preparations before the Cyber Incident

• Define actors, for each entity, who will be involved into the crisis cell. These actors should be documented in a contact list kept permanently up to date.
• Make sure that analysis tools are up, functional (Antivirus, IDS, logs analysers), not compromised, and up to date.
• Make sure to have architecture map of your networks.
• Make sure that an up to date inventory of the assets is available.
• Perform a continuous security watch and inform the people in charge of security about the threat trends.

http://cert.societegenerale.com/resources/files/IRM-1-Worm-Infection.pdf