When incidents are reported to WTS, an incident response process that was developed based on best practices in the field of information security, is used by the WTS Information Security Office and a supporting Cyber Security Information Response Team (CSIRT).
The central role played by the WTS Information Security Office, and more specifically by the WTS Central Information Security Officer, provides many benefits to the University community, including:
- Use of latest incident response technologies and techniques;
- Consistent incident handling with a dynamic CSIR Team based on technical specifics of the incident;
- Feedback of lessons learned into the CSIRT process;
- Aggregation and reporting of anonymized incident information in support of ongoing risk analysis/ risk management efforts and more
Related Documents:Western IR Escalation Plan v1.0.pdf
Western IR Event or Incident v1.3.pdf
Published on and maintained in Cascade.