Is your incident response plan up to date? Better yet, is your emergency contact section of your incident response plan up to date? I came across a website this week that lists your local secret service field office electronic crimes division. It’s the Field Guide to State Electronic Crime Investigators & Resources. This site allows you access to multiple electronic crimes resources per state.

What? You don’t have an incident response plan (shame on you)? IR plans should be tailored to fit a company’s industry, risks and needs. However, you can find many templates on Google and modify to fit your specific needs. Just try searching for Information Security Incident Response Plan filetype:doc. Please be sure to pay attention to any copyright notices.

An incident response plan isn’t really a plan unless it is tested at least annually. So happy IR planning!