Chapter 15 - Recovery of Security

Abstract

This chapter introduces recovery strategy. Recovery of security is complex and requires planning and support from several business functions. Computer security incident management is related to, but not the same as, several other fields such as contingency planning, continuity of operations, and emergency management. These other fields are introduced to compare and contrast their functions with computer security incident response to get a clearer picture of what each task involves. Emergency management, in particular, is presented in some depth because there are lessons for computer security incident response to learn from the more mature field of emergency management.