Home/ Resources/ Playbook Policy Engine/ Data Theft

Data Theft.

Data is being extracted by an external or internal party. This playbook walks the response through all seven phases of the NIST incident response process: Prepare, Detect, Analyze, Contain, Eradicate, Recover, and Post-Incident Handling.

Download PDF Download Visio source

Data Theft — Prepare phase flowchart — 01
Prepare

Data Theft — Detect phase flowchart — 02
Detect

Data Theft — Analyze phase flowchart — 03
Analyze

Data Theft — Contain phase flowchart — 04
Contain

Data Theft — Eradicate phase flowchart — 05
Eradicate

Data Theft — Recover phase flowchart — 06
Recover

Data Theft — Post-Incident Handling phase flowchart — 07
Post-Incident Handling

Download PDF Download Visio source

Open source. Built and refined by the IRC community since 2017. Spotted something to improve? Email hello@incidentresponse.com.

← Back to the gallery

Data Theft.

Prepare

Detect

Analyze

Contain

Eradicate

Recover

Post-Incident Handling

Cookies and analytics