What is Incident Response?
Incident response is an organized approach to addressing and managing the aftermath of a security breach or attack (also known as an incident). The goal is to handle the situation in a way that limits damage and reduces recovery time and costs.
The following is an infographic that lists the basic process that occurs when a breach has been identified in the company. The security team goes through a various of phases from beginning to end in order to identify the breach and mediate the incident. At the end, reports are generated and lessons are learned to help mitigate future risks and prepare for the unknown.
Click to View in Higher Resolution
Source: searchsecurity.techtarget.com/definition/incident-response
