Logical Security and Operational Security sections of SP. Also see SP5 "Incident Response".