Security incidents are unavoidable facts of life and operational errors can occur even in the most reliable information systems. However, if they are not handled properly they can cause irreversible damage to the entire IT infrastructure.
The approach of experts at KÜRT is that the goal of information-security incident management is to handle the interrelated events affecting the IT security of an organization organically: security incidents should be ruled out and prevented; risks arising from operation should be reduced; security incidents should be identified, solved and followed-up, and those who create incidents should be disciplined. The greatest advantage of the development of a suitable incident management and incident elimination process that also takes into account the problems outlined above is the reduction of the detrimental effect of incidents on business operations and the increase of customer satisfaction, which comes from improving communication between IT operators and users. The efficient and successful implementation of our incident management methodology is guaranteed by our adherence to international standards (ITIL*, CERT/CC**) as the base for our methodology, as well as the reliable practical experience of our experts. Our activities in information-security incident management create a relationship between users on the one side and IT operators and information security experts on the other. Kürt experts working on information security incident management assignments usually perform first-line error elimination tasks (elimination of low-volume, low-priority, simple or general problems and problems requiring less specialist skill); however, in the event of serious or major incidents, they will coordinate the entire elimination or recovery process.
* ITIL: IT Infrastructure Library
** CERT/CC: Computer Emergency Response Team Coordination Centre
Print page