Risk Management

GovCertUK assists Government departments and organisations in the recovery from a computer security incident. We recommend that all Local Authorities report their incidents to both GovCERT and their Local WARP.

Information on reporting incidents to GovCERT, please visit their website: http://www.govcertuk.gov.uk/reporting-an-incident.shtml

To assist in the identification and categorisation of an event please read GovCertUK's Incident Response Guidelines (pdf) for further information and guidance.

Additionally, Verizon have developed an incident reporting framework, VERIS. VERIS is a set of metrics designed to provide a common language for describing security incidents in a structured and repeatable manner. The overall goal is to lay a foundation on which we can constructively and cooperatively learn from our experiences to better manage risk. Details of this framework can be found here:
https://verisframework.wiki.zoho.com/