Computer security incident response has become an important component of information technology (IT) programs. Because performing incident response effectively is a complex undertaking, establishing a successful incident response capability requires substantial planning and resources. The CIT-CERT Coordination Center will assist organizations in establishing computer security incident response capabilities and handling incidents efficiently and effectively. We will provide guidelines for incident handling, particularly for analyzing incident-related data and determining the appropriate response to each incident.