Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 53 guests and 1 member online
EH-Net News Feeds
Latest Additions
 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Incident Responsearrow Incident Response vs. Incident Handling
EH-Net
May 25, 2012, 06:41:09 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Advertise on EH-Net!! - Reasonable Rates, Highly Targeted Audience.
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Incident Response vs. Incident Handling  (Read 3533 times)
0 Members and 1 Guest are viewing this topic.
timmedin
Sr. Member
****
Offline Offline

Posts: 470



View Profile WWW
« on: April 17, 2009, 04:19:45 PM »

A good overview of the difference between handling and responding to an incident and the skills needed for each.

Quote
One of the things that comes ups frequently in discussion is the difference between incident response, and incident handling. 
...
That is the difference between Incident Response, and Incident Handling.  Incident Response is all of the technical components required in order to analyze and contain an incident.  Incident Handling is the logistics, communications, coordination, and planning functions needed in order to resolve an incident in a calm and efficient manner. Yes, there are people who can fulfill either role, but typically not at the same time. The worse things get, the greater the requirement for the two different roles becomes.
...

http://isc.sans.org/diary.html?storyid=6205&rss
Logged

twitter.com/timmedin | http://blog.securitywhole.com
unsupported
Sr. Member
****
Offline Offline

Posts: 318


Unofficial Newbie Moderator


View Profile
« Reply #1 on: April 20, 2009, 09:16:49 AM »

I see your post, and raise you a blog.  http://taosecurity.blogspot.com/2009/04/speaking-of-incident-response.html

Quote
Incident response and incident handling are synonyms. If you need to differentiate between the role that does technical work and one which does leadership work, you can use incident response/handling for the former and incident management for the latter.

The blog goes into a further dissection of GCIH as a technical cert, with CERT's CCSI as being the management portion.

I agree with Bejtlich in that being GCIH certified does not automatically grant someone the ability to handle incidents.

But then again, I neither myself or my company would ever pay $9k+ for CERT's cert.. so I'm going GCIH.

Good topic!  I was going to bring it up this morning if someone hadn't.
Logged

-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.16 | SMF © 2011, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.128 seconds with 22 queries.
 

gk_static-ad_feb2012.jpg
Global Knowledge: Build Security Skills to Protect & Defend

els_130x200fixed2.gif
eLearnSecurity Student Course Now Live!
5% Off with Code
ELS-EH-5

SANS Deals 4 EH-Netters
$150 OFF Any SANS Course in Any Format!
Coupon Code: EHN_Connect Including SANS Security West 2012 & SANSFIRE 2012
Recent Forum Topics

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!

Vote For EH-Net

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2012 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.