These comments are from three of the first people to receive copies of the new Incident Handling Guide. It represents the combined experience of over fifty security professionals who have lived through difficult computer security incidents. The list below includes a few of the organizations involved in its creation. CIAC Most importantly, it is a consensus document.
All participants suggest elements and changes.
The process moved through multiple iterations. Some highly charged issues are presented with multiple options. Every participant had to approve the whole document. It is 44 pages long, describes 90 actions in thirty-one steps in six phases. It offers six forms to use in the incident response process.