Incident Response

The structured process of detecting, containing, eradicating, and recovering from cybersecurity incidents. Incident response follows defined phases: preparation, identification, containment, eradication, recovery, and lessons learned. Organizations maintain IR plans, playbooks, and retainer agreements with specialized firms.

Definição editorial da DecipherU. Para definições técnicas autoritativas, consulte NIST, ISO, ou o órgão normativo correspondente.