Sunday, March 14, 2010

Verizon Incident Sharing Framework

Earlier this month Verizon Business announced cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir Verizon Incident Sharing Framework (VerIS framework). This document is a means to describe digital security incidents, using four main groupings: 1. Demographics, 2. Incident Classification, 3. Discovery and Mitigation, and 4. Impact Classification.

The idea is to provide a framework that incident investigators can complete for every digital security incident. Using cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 output, security teams can better identify trends and make recommend improved security strategies and tactics. For example, Verizon builds cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir Data Breach Investigation Report using data from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir incident responses as formatted using cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 VerIS framework.

Verizon asked me to participate on a "board" affiliated with this project, so you can expect to hear more from me. Verizon started a Zoho Forum to discuss cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 framework, but I think a Wiki would better facilitate collaboration and development of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 document. At work we are working on our next generation incident management system, so I think cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 VerIS framework might help us identify information to collect on incidents.

2 comments:

Unknown said...

Great effort from Verizon.

Should date of incident be called date of discovery ?

I bet you are going to add full content to list of evidence sources :-)

WHBaker said...

Went with your suggestion and moved to a wiki: https://verisframework.wiki.zoho.com/