16
Marty Gillespie (mgg@dnaco.net)
Identification I
•Don’t be afraid to alert early!
–The sooner an event addressed, the quicker it can be resolved. Remember, time is of the essence!
•Properly trained users can be a significant resource for reporting incidents
•Ensure the Incident Response Team is being fed timely and accurate information
•Check multiple sources for additional information