Incident response is an organised approach to addressing and managing the aftermath of a security breach or attack. The goal is to limit damage and reduce recovery time and costs.
The original post included an infographic listing the basic process when a breach has been identified. The security team works through phases from beginning to end to identify the breach and remediate. At the end, reports are generated and lessons learned.
Source: searchsecurity.techtarget.com/definition/incident-response. The infographic image is in the assets folder.
The original post centred on an infographic, available in the assets folder.
Originally published 10 November 2014. Migrated to the new IRC site in 2026.