Detection and response activities
Incident handling by the incident Service desk and the swift involvement of ISISFAST Expert. Client is provided with a series of detection indicators necessary to launch incident response activities. Education sessions explain Indicators, threat classes and incident classes. Detection of an incident initiates an Incident Service desk request within business hours (9:00 to 17:00). The client single point of contact or his substitute is entitled to call the Incident Service desk. He/She then gets a direct channel communication with the Incident Handler expert. ICTC processes require a fast reaction and the execution of a specific protocol agreed upon with the client. Additional services involves that ISISFAST Experts use existing indicators to react on specific alerts (ex: wrong password, virus, …). Other optional services involve the installation by ISIFAST protection experts of specific devices/systems to detect and correlate security events. The Incident Handler reacts according to ICTC procedures and in collaboration with the client contact. |