Security Crisis and Incident Response

Security Crisis and Incident Response comprises of a comprehensive review of three core components, aimed at determining the adequacy of the defined crisis and incident response techniques. These three core components are as follows:

1. Application Security: Under this, core applications are examined and existing processes are reviewed to formalize administration and crisis response mechanisms.
2. Network Security: Network infrastructure and configuration management techniques are reviewed for integrity. Incident handling and the responding mechanism are defined for the core infrastructure.
3. User-Level Security: Existing policies and recent incidents are reviewed along with current best practices to define an appropriate user-level security framework.

Security Crisis and Incident Response includes the following three activities:

Incident Monitoring and Handling

• Investigation Management: Defining the management model for security investigations
• Emergency Responses: Defining the response during various types of emergencies
• Root Cause Analysis: Identification of the root cause of an incident

Emergency Response Planning

• Response Team Coordination: Defining the coordinating mechanism between the team, i.e. escalation lists and responsibilities
• Policy and Procedure Development: Development of suitable policies and procedures
• Response Plan Testing: Testing the Response plan for practicality and effectiveness

Electronic Discovery

• Forensic Analysis: Defining an outline to conduct forensic analysis
• Evidence Handling: Defining a method to handle evidence
• Litigation Support: Preparation of evidence for litigation purposes, such as disciplinary action

Coforge's Next-Gen Security Operations encompass the following: