The basics of the incident response process

The incident response process is an overarching process that allows investigators to approach incident response cases in a structured manner. The seven stages within the incident response process enable investigators to understand the actions required to satisfy the conditions in each stage. The following diagram outlines the critical steps of the incident response process:

Figure 8.1 – The incident response process

Here are the key stages:

• Preparation: This is the pre-incident stage, where organizations work with the incident response teams to document and plan activities in the event of an incident. Typically, organizations will establish their objectives for handling an incident and how to address critical cybersecurity issues arising from incidents in the form of an incident response plan.

  The incident response plan will typically include the roles and responsibilities of various actions during...