Building a Comprehensive Incident Management Program

Explore a comprehensive incident management program in this conference talk from Circle City Con 2015. Learn about the essential components of an effective program, including planning, roles and responsibilities, and the incident management process. Discover how to establish an executive sponsor, incident response manager, and specialized teams. Delve into detection methodologies, escalation procedures, containment strategies, and post-incident analysis. Gain insights on reporting, documentation, and status tracking. Assess and fill gaps in your program, explore necessary tools and training, and develop advanced capabilities. Understand the importance of communicating with management, handling false positives, and implementing effective monitoring techniques.

Introduction
Plan
Roles Responsibilities
Executive Sponsor
Incident Response Manager
Technical Specialists
Business Process Leaders
Catchall People
Adhoc Team
Incident Management Process
Detection Process
Methodology
Escalation
Containment
Analysis
Remediation
Post Mortem
Reporting Facilities
Documentation
Status Tracking
Assessing Filling Gaps
Tools
Training
Consultant
Contacts
Advanced Capabilities
Measure
Conclusion
Communicating with Management
False Positives
Monitoring a Sample