There is now a Focus area to go with this mailing list

[ah () SECURITYFOCUS COM (Alfred Huger)]

 This focus area is intended to provide practical approaches to
information protection. This Incident Handling focus area is a companion
to the IDS focus area which zeroes in on intrusion detection--the "funnest
game in town" according to some. Detection needs to be followed up by
careful assessment and appropriate response. These indeed are black arts
since most detective systems are immature and each organization's IT
environment and circumstances differ.

http://www.securityfocus.com/ih

Your opinions would be appreciated.

Alfred Huger
VP of Engineering
SecurityFocus.com