Home page logo

basics logo Security Basics mailing list archives

Re: compromised network
From: "Meritt James" <meritt_james () bah com>
Date: Mon, 29 Dec 2003 15:12:47 -0500

In general, yes.  But it depends on who "you" is (consult corporation
notification policy and incident response procedures - you DO have them,
don't you?) and which authorities (different authorities have different
area or responsibilities) and what is meant by 'alert' (forensic
evidence?  What do you tell them so you will not evoke a "yeah?  So?")


Francisco Mário Ferreira Custódio wrote:

Hello Dana.

All questions make sense!

If your network has been compromised, you should alert the authorities.

James W. Meritt CISSP, CISA
Booz | Allen | Hamilton
phone: (410) 684-6566


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]