From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 23,100 courses taught by industry experts.

Escalation and notification

Escalation and notification

From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Start my 1-month free trial Buy for my team

Escalation and notification

“

- [Narrator] When security professionals detect a potential incident, they should immediately swing into first responder mode, acting to isolate affected systems and contain the damage caused by the incident. As soon as they've handled the immediate emergency, they may then move into the escalation and notification process. This process has several important objectives. First, it evaluates the severity of the incident based upon its potential impact on the organization. Second, it escalates the incident to an appropriate level of incident response. And finally, it notifies management and other stakeholders of the incident and the path to resolution. After containing an incident, responders should begin a triaging process to identify the potential impact of that incident. The process for rating incident severity should be found in the organization's incident response procedures. One common scheme uses a three-tiered scale of low impact, moderate impact, and high impact incidents. Low…

Contents