=
Best
...
Practices
...
Incident
...
Management
- ENISA
- http://www.enisa.europa.eu/act/cert/support/incident-management/files/good-practice-guide-for-incident-management/at_download/fullReport
- 110 pages describing the incident managment process, made from the viewpoint of a CERT but pretty agnostic about "niche-market"
- includes policies / outsourcing / (inter)national cooperation best practices, useful in the TF-NOC world