8
Marty Gillespie (mgg@dnaco.net)
Preparation
II
•Convince
upper management of the importance of an incident response
capability
–Collect related news
items
–Make sure to keep
track of all past incidents
•Establish a
universal time source for the organization
–Dealing with issues of
time variations between systems can cause real issues during an
incident