SANS - Incident Handler's Handbook Template

This playbook contains the phases for handling an incident as they are described in the SANS Institute ‘Incident Handler's Handbook’ by Patrick Kral. https://www.sans.org/reading-room/whitepapers/incident/incident-handlers-handbook-33901 ***Disclaimer: This playbook does not ensure compliance to SANS regulations.

SANS · 22 tasks · 0 inputs · 0 outputs

Flowchart

Start Start Preparation Preparation a. Policy a. Policy b. Response Plan/Strategy b. Response Plan/Strategy c. Communication c. Communication d. Documentation d. Documentation e. Team e. Team f. Access Control f. Access Control g. Tools g. Tools h. Training h. Training Preparation Preparation Identification Identification Identification Identification Containment Containment Containment Containment Eradication Eradication Eradication Eradication Recovery Recovery Recovery Recovery Lessons Learned Lessons Learned Lessons Learned Lessons Learned Done Done