...installing and configuring tools so they can respond to an incident. These systems and the associated tools must be properlyprotected when not in use. Assemble all relevant communication information. You should ensure that you have contact...
http://technet.microsoft.com/library/cc700825.aspx