Computer security incident activity can be defined as network or host activity that potentially threatens the security of computer systems. Examples of incidents could include activity such as:
- Attempts (either failed or successful) to gain unauthorized access to a system or its data
- Unwanted disruption or denial of service
- Unauthorized use of a system for the processing or storage of data
- Changes to system hardware, firmware, or software characteristics without the owner's knowledge, instruction, or consent
One of the layers that many organizations are including in their strategy today is the creation of a Computer Security Incident Response Team, generally called a CSIRT. However, not all companies have the budget or expertise for this.
At AKATI Consulting, our incident response team can be there on-call 24-7, to make sure you respond quickly and appropriately. We guarantee that all available evidence is maintained for the purposes of identifying or prosecuting your attacker by stimulating a rapid reaction to incidents.
This involves taking an in-depth look at an incident report or incident activity to determine the scope, priority, and threat of the incident, along with researching possible response and mitigation strategies that includes providing forensic evidence and identifying technical deficiencies that enabled the attack.
Back to Services - Information Security
|
Information Security
