1. A computer program product for creating a record of one or more computer security incidents, said computer program product comprising: a computer-readable, tangible storage device; first program instructions to record information about a computer security incident and a date stamp or time stamp for the computer security incident, the computer security incident information identifying one or more attacks received from a network computer that occur prior to an actual computer security threat; second program instructions, responsive to the computer security incident information, to classify the computer security incident and identify one or more computer security procedures corresponding to the classification, each of said computer security procedures comprising one or more steps for investigating or mitigating the computer security incident; third program instructions to generate a display of said one or more computer security procedures; fourth program instructions to receive a selection from a user of one of said computer security procedures and one or more steps of the selected computer security procedure to mitigate the one or more attacks; and fifth program instructions to generate and output a record comprising the computer security incident information, results of execution of the selected one or more steps of the selected computer security procedure, an identity of the user who selected the computer security procedure, and the date stamp and time stamp for the computer security incident, wherein the fifth program instructions record the results of the executed computer security procedure with a digital signature to enable detection of any attempted modification of the record, whereby integrity of the record can be monitored, and wherein said first, second, third, fourth and fifth program instructions are stored on said computer-readable, tangible storage device.