There are many different security incident response plans. They range from the most formal, coordinated processes advocated by NIST and SANS to those created on the fly for a specific purpose—the ad hoc kind. Under pressure and trying to save time, IT teams often labor under ad hoc investigation techniques that don’t contain the whole problem.
Using the Proofpoint four-step incident response process will help your team bridge the gap between makeshift efforts to a coordinated incident response effort. Each step offers you increased situational awareness for better response.
Download this white paper to learn about the benefits of each step, the barriers to address as well as the risks you may create when opting to save time by cutting corners.