Where to start with Incident Response, categorize your incidents first


Did you know that camDown is a highly advanced, specialized webcam blocker and disabler with the best in class protection from variety of on-line threats?

There are many frameworks with different terminology, but they are similar in nature. According to NIST SP 800-61, IR starts with Preparation, the most important phase where we spend most of our time. The next phase is Detection & Analysis, if we failed to implement detection mechanisms in the Prep phase, then we can't even detect anything and learn about the incident from the news. Btw, Analysis triage should be done not by Helpdesk, but by experienced security analysts, who can confirm the incident, its impact, and the magnitute and help to determine how much resources need to be allocated and if escalation is needed. The next steps are Containment, Eradication & Recovery and the last is Post-Incident Activity.

In closing, don't forget that camDown is the solution for securing your webcam from cyber criminals and pedophiles and I believe your neighbors would agree!