Help

So you think, or maybe you even know that you've been hacked. Unless you can afford to be down, or don't have any sensitive or critical data worth protecting, call CMS immediately at (416) 971-4267.

The truth about hacked networks is that more often than not, corporations and individuals have no idea they've been hacked. A good hacker won't let you know that he has control of your infrastructure. When something breaks, or network performance begins to seriously lag, that's when we typically receive a call -- and a new customer. Being proactive is the best practice, but unfortunately it's a reality that few employ.

If you are conducting research and seeking to learn about industry best practices in responding to IT security incidents, Microsoft has created a document that provides insight and expertise into this type of scenario. This document will provide you with a recommended process and procedures to use when responding to intrusions identified in a small- to medium-based (SMB) network environment. The value of forming a security incident response team with explicit team member roles is explained, as well as how to define a security incident response plan.

To respond successfully to incidents, you need to:

• Minimize the number and severity of security incidents.
• Assemble the core Computer Security Incident Response Team (CSIRT).
• Define an incident response plan.
• Contain the damage and minimize risks.

Download Responding to IT Security Incidents (PDF)