Crisis management is a well-known discipline, referring to planning for how your organization would deal with an event such as a natural disaster (hurricane, earthquake, tornado, bombing, etc.). A new category within the crisis management scenario is that of handling a “cyber crisis” – a major incident of hacking/intrusion, denial of service or other Internet-related event that affects the whole organization and the ability of its members to carry out their normal job duties. This article from the NC State University’s Enterprise Risk Management Initiative advocates a new philosophy and approach to incident response based on the evolving state of the cyber world. Check out this and other ERM resources here:
http://www.poole.ncsu.edu/erm/index.php/articles/entry/Cyber-Crisis-Management