Collective computer incident response using cognitive maps

Incident response is becoming an important activity in organizations as security intrusions are increasing rapidly. Cooperation and view sharing within incident response team are very important for successful incident handling. We introduce a causal map based method helping the incident response team members reasoning collectively about security incidents. In this method, we use heuristics to help reasoning within causal maps and we propose a sensitivity analysis approach for assessing the error propagation introduced by the causal maps used in This work.