SANS Incident Handler's Handbook and PICERL Methodology
Phase 1: Preparation – SANS Incident Handler's Handbook and PICERL Methodology

SANS Incident Handler's Handbook and PICERL Methodology P-c: P-c Communication plan: who the team contacts, when and why, including when to involve law enforcement

Every member of the response team knows whom to contact during an incident, at what point and for what reason (technical specialists to restore service, management for updates); without a plan response slows and the wrong people are called. The organization also decides in advance when law enforcement should or should not be brought in, given the consequences either way.

Maintained by Gerard BlokdykControl text last updated

Other controls in Phase 1: Preparation – SANS Incident Handler's Handbook and PICERL Methodology

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SANS Incident Handler's Handbook and PICERL Methodology controls