... Assurance Foundations - SANS GIAC LevelOne © 2000, 200118 Incident Handling • Prepare, detect, contain, eradicate, recover, lessons learned• Role of CIRTs and law enforcement• Personal incident handling ... your organization is an incident handler in some sense. In the LevelOne program, we will learn both the theory and pragmatics of incident handling. (Editor’s note: Incident Handling is discussed ... next slide is titled Incident Handling .Bad things happen, and that is why incident response is a critically important capability for a robust organization. Computer incidents are not limited...