Preparation: Develop malware-specific incident handling policies and procedures. Conduct malware-oriented training and exercises to test your policies and procedures. Determine whether your procedures work before you actually have to use them.

• 预防:开始特定恶意软件事故处理策略和过程。举行针对恶意软件的培训和训练来测试策略和过程。在实际使用他们之前判断你的过程是否工作。