Incident Response

Incident response (IR) is an organization’s approach to managing a data breach or cyber attack, including the way the organization attempts to handle the consequences of the attack or breach. Sophisticated incident response systems limit damage and reduce recovery time and costs.

An effective incident response will involve preparation, detection, containment, eradication, recovery, and post-incident activities, such as analyzing the incident (a “post-mortem”) for lessons that can improve future response efforts.