Incident Management and Response

An incident can be thought of as a violation or imminent threat of violation of computer security policies, acceptable use policies, or standard security practices (

NIST SP 800-61

). If you suspect an information security or privacy related incident, please contact your OPDIV's Chief Information Security Officer or the Secure One HHS Helpdesk. Secure One Support can be reached by email or phone at (202) 205-9581.

Management and Response Resources

United States Computer Emergency Readiness Team (United States Computer Emergency Readiness Team)
Government Forum of Incident Responders and Security Teams (Government Forum of Incident Responders and Security Teams)
National Institute of Standards and Technology Computer Security Resource Center (National Institute of Standards and Technology)
- Contingency Planning Guide for Information Technology Systems (PDF - 1.89 MB) (Computer Security Resource Center)
- NIST SP 800-61, Computer Security Incident Handling (PDF - 2.71 MB) (Computer Security Resource Center)
- NIST SP 800-83, Guide to Malware Incident Prevention and Handling (PDF - 2.89 MB) (Computer Security Resource Center)
- NIST SP 800-86, Guide to Computer and Network Data Analysis: Applying Forensic Techniques to Incident Response (PDF - 3.2 MB) (Computer Security Resource Center)

Plan Templates

Contingency Plan Template (DOC-197 KB)
- Reference NIST SP 800-34
Incident Response Plan Template (DOC-133 KB)
- Reference NIST SP 800-61, 800-83 and 800-86

Memoranda

HHS Response Plan to OMB M-07-16
(DOC - 155 KB)
(PDF - 184.7 KB)
- Response plan HHS has put in place to meet the requirements of Office of Management and Budget Memoranda 07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information, which calls for the elimination of unnecessary use and collection of social security numbers.