Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

I am looking for a incident response handler's log solution that would scale well to record up to 1000 incidents/yr.

What do people use? Any good templates out there? Any software, preferably open source?

share|improve this question
Security.SE can't give product recommendations. A related on-topic version of this question is here – makerofthings7 Oct 4 '12 at 16:49
Thanks, but perhaps I wasn't clear enough. I am not looking for a Log Management Solution. I am simply looking for a better way to log incidents, something that would scale and lend itself to metrics gathering better than a simple spreadsheet or text file. – Dylan Oct 7 '12 at 22:10
So you're looking for a manual methodology, logical workflow, or perhaps a way to organize information at a managerial level? I suppose more background information is needed, namely what are the specific incidents you want to capture? Can you provide anonymized examples? What are your managerial goals? To reduce labor or cost of incident resolution? Track vulnerabilities by product, or individual (for in house developed application or system)? Is the duration of time to identify, R&D a fix, QA, and deployment important? What groups in your business do you interact with? – makerofthings7 Oct 8 '12 at 5:27
Will this be used for budgeting or forecasting? Will you forecast staff augmentation with this data? Is this for compliance of any regulation (Sarbanes Oxley), ISO etc? Microsoft Excel, Google Docs, Sharepoint can easily handle 1000 incidents per year. – makerofthings7 Oct 8 '12 at 5:29

closed as not constructive by Scott Pack, Gilles, Thomas Pornin, Iszi, Jeff Ferland♦ Oct 8 '12 at 21:46

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.

Browse other questions tagged or ask your own question.