The problem
Despite increasing the information security budget allocation, incidents are still happening on a daily basis. Any security incident, no matter if it's major or minor, represents a loss for the company. Therefore, it is critical that companies and their management understand this issue. Management also have to allow a sufficient time period for planning and developing appropriate incident management controls and procedures.
By having proper and carefully planed incident management system, approved by the management and aligned with the business goals and objectives, companies can significantly reduce potential losses and business disruption in case of security incidents.
Service
Incident management service helps companies prepare their information systems and business processes in the case of security incidents. This service covers a wide range of proactive measures which allow timely detection and reaction to security incidents. This results in minimal losses and business disruption. Besides the initial system planning, design and implementation, this service also covers technical and administrative controls, as well as special awareness trainings and education for appropriate personnel. It is important to understand that a properly implemented incident management program can significantly reduce costs and improve overall performance of the company.
Activities included in this service are:
- Definition of incident management strategies, roles and responsibilities
- Development of security incident plans, guidelines and procedures
- Preparing network infrastructure for detection, analysis, and reaction to security incidents
- Restoration of the information system,
Benefit
INFIGO IS helps clients plan, design, implement and maintain their incident management program. As a result, the information system and business processes will be prepared for security incidents, so that losses and business process disruption will be minimized.
An efficient and properly implemented incident management system will enable companies collect and analyze data about their information system security. This data can be later used as a mechanism to implement additional controls and improve the overall security level.
-
Incident handling

