Home Services Offered by the ITSS Office Information Security Incident Management Program

Information Security Incident Management Program

ITSS is charged by the IT Commons Security Working Group with developing incident response handling processes and procedures. To accomplish this goal, the IT Security Council asked Paul Howell, the Chief Information Technology Security Officer, to assemble a group of individuals from various organizations across the University to plan a University-wide Information Security Incident Management Program. The following documents are the result of a preliminary effort which constitutes Phase 1 of the program.

Note: You must be affiliated with the University of Michigan to access these documents.

• Information Security Incident Management Program, Phase 1 Proposal (Report to U-M Executive Officers on overall direction for the program and the effort involved in developing and implementing consistent incident management procedures and tools across the University)
• U-M Standard Practice Guide (Proposed), General University Policies and Procedures, Information Security Incident Reporting Policy
• Supplement to Proposed SPG - Information Security Incident Reporting Policy

Phase 2 of this effort will encompass the design of incident management protocols, and the specification of supporting tools.