Gesellschaft fr Informatik e.V.

Lecture Notes in Informatics


IT-Incident Management & IT-Forensics - IMF 2006, Conference Proceedings October, 18th - 19th, 2006, Stuttgart P-97, 128-143 (2006).


2006


Editors

Oliver Göbel, Dirk Schadt, Sandra Frings, Hardo Hase, Detlef Günther, Jens Nedon (eds.)


Contents

Monitoring of incident response management performance

Maria B. Line , Eirik Albrechtsen , Stig Ole Johnsen , Odd Helge Longva and Stefanie Hillen

Abstract


Monitoring the performance of incident response (IR) management is important input for improving the IR management system. A set of performance indicators, which assists monitoring in a proper way, is described regarding: the incident response management system; information security culture; number of incidents responded to; average time spent on responding; consequences of incidents; number of incidents of high loss; downtime of SCADA systems; total costs of incident response; and learning. The entire set of proposed indicators is well suited for monitoring the total incident response management of an organisation as it covers all parts of incident response management.


Full Text: PDF

ISBN 978-3-88579-191-1


Last changed 24.01.2012 21:56:44