A Security Coordination Model for an Inter-Organizational Information Incidents Response Supporting Forensic Process

The high cost for information security incident response makes organizations hesitate to possess their own expert security team. Also organizations are still reluctant to share their own security circumstances with external organizations. By the way, they hope experts will help to defend against cyber threats without losing their reputations. To satisfy these requests of organizations, we propose a security coordination model that supports security incidents response in an organizational architecture, in this paper. Besides, our model has cyber forensic functions for collecting digital evidences from real time monitoring and on-site investigation of the incidents and reporting the analysis results to authorized organizations effectively.