Responding to Intrusions

CERT has released some pretty good information on how to respond to intrusions.

This is an important topic to understand. What happens in your organization when safeguards are compromised or fail? Most people do not have an incident response plan of any kind, leaving the security team and the IT team to tread water while they finger point, instead of dealing with the intrusion.

This is a good read. Make sure you follow the links to fully break down and understand was is expected of you, and just how you should do it.