A computer emergency response team policy

Points out the job security risk to those responsible for the security of computerized information systems in the event of system failure resulting in financial loss. Argues that prevention of system problems is far less expensive than after‐the‐event mitigation. Makes a distinction between disasters and emergencies and focuses on the latter. Recommends and provides guidelines for, the establishment of a computer emergency response team to provide accelerated problem detection, damage control and problem correction services.