Incident Management
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
An incident management capability is the ability to provide management of computer security events and incidents. It implies end-to-end management for controlling or directing how security events and incidents should be handled. This involves defining a process to follow with supporting policies and procedures in place, assigning roles and responsibilities, having appropriate equipment, infrastructure, tools, and supporting materials ready, and having qualified staff identified and trained to perform the work in a consistent, high-quality, and repeatable way.
Part of a Collection
Resources for Creating a CSIRT
Cite This SEI Report
Killcrece, G. (2005, December 1). Incident Management. Retrieved August 14, 2026, from https://www.sei.cmu.edu/library/incident-management/.
@techreport{killcrece_2005,
author={Killcrece, Georgia},
title={Incident Management},
month={Dec},
year={2005},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/incident-management/},
note={Accessed: 2026-Aug-14}
}
Killcrece, Georgia. "Incident Management." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, December 1, 2005. https://www.sei.cmu.edu/library/incident-management/.
G. Killcrece, "Incident Management," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 1-Dec-2005 [Online]. Available: https://www.sei.cmu.edu/library/incident-management/. [Accessed: 14-Aug-2026].
Killcrece, Georgia. "Incident Management." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 1 Dec. 2005. https://www.sei.cmu.edu/library/incident-management/. Accessed 14 Aug. 2026.
Killcrece, Georgia. Incident Management. Software Engineering Institute. 2005. https://www.sei.cmu.edu/library/incident-management/