Incident Handling as a Service

Many small companies are focused on their primary businesses and do not have enough resources to secure their network. Securing business computer assets in many cases mean to have a firewall and anti-virus software installed. Policies are not something that comes with the hardware and have to be developed. User awareness training, log management and an Incident Handling team is also not part of the package from the computer dealer. The paper will cover the process from preparation to the lessons learned report, showing examples of how the service could be provided by preparing template documents, setting up customer network surveillance, and user awareness presentations.