Security Incident Management Runbook: Malicious Email

Author(s): Nitin Mukesh

Incidents can be categorized into runbooks where a standardized response process is defined, eliminating inconsistency and ambiguity while increasing operational efficiency. Clearly document use cases that pertain to the incidents commonly faced by your organization.

Customize the malicious email runbook by including the following sections for each single email account multiple email accounts and executive email accounts:

  • Incident summary
  • Escalation process diagram
  • Detailed response procedures
  • Revision history
Visit our IT Crisis Response Resource Center
Over 100 analysts waiting to take your call right now: +1 (703) 340 1171