Incident Response

The structured process of detecting, containing, eradicating, and recovering from cybersecurity incidents. Incident response follows defined phases: preparation, identification, containment, eradication, recovery, and lessons learned. Organizations maintain IR plans, playbooks, and retainer agreements with specialized firms.

Definición editorial de DecipherU. Para definiciones técnicas autorizadas, consulta NIST, ISO, o el organismo de normalización correspondiente.