Re: compromised network
From: Meritt James (meritt_james_at_bah.com)
Date: 12/29/03
- Previous message: Francisco Mário Ferreira Custódio: "RE: locked out of XP, need file access"
- In reply to: Francisco Mário Ferreira Custódio: "RE: compromised network"
- Next in thread: Angus: "RE: compromised network"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 29 Dec 2003 15:12:47 -0500 To: Francisco Mário Ferreira Custódio <fcustodio@eda.pt>
In general, yes. But it depends on who "you" is (consult corporation
notification policy and incident response procedures - you DO have them,
don't you?) and which authorities (different authorities have different
area or responsibilities) and what is meant by 'alert' (forensic
evidence? What do you tell them so you will not evoke a "yeah? So?")
Jim
Francisco Mário Ferreira Custódio wrote:
>
> Hello Dana.
>
> All questions make sense!
>
> If your network has been compromised, you should alert the authorities.
> ----------------------------------------------------------------------------
-- James W. Meritt CISSP, CISA Booz | Allen | Hamilton phone: (410) 684-6566 --------------------------------------------------------------------------- ----------------------------------------------------------------------------
- Previous message: Francisco Mário Ferreira Custódio: "RE: locked out of XP, need file access"
- In reply to: Francisco Mário Ferreira Custódio: "RE: compromised network"
- Next in thread: Angus: "RE: compromised network"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|