INCIDENT RESPONSE

Incident Response



Incident Response

Answer# 1

Although, technical procedures are depending over the type and categorization of incident, every incident should involve the six phases:

Preparation

Ready the incident response team to handle incidents.

Detection

Analyze and gather events; find out the existence of threat as well as the impact to availability, integrity, or confidentiality of an IT resource.

Containment

Preserve the evidence, and prevent the damage from attackers.

Remediation

Remove the artifacts that are left from attacker.

Resolution

Return systems to monitor as well as production.

Post-Mortem Review / Closure and lessons learned

Document results with implement lessons learned in order to improve operations or incident handling.

Answer# 2

If an organization has no ...