Incident response – Analysis: Analysis involves evaluating the impact and scope of the incident to determine the appropriate response. This may include gathering and analyzing data from various sources, such as logs, network traffic, or affected systems. For example, a company may use forensic tools to analyze data from a compromised server to determine the extent of the attack and the data that has been accessed.
Categories: CC D5: Security Operations | CCSP D5: Cloud Security Operations | CISM D4: Incident Management | CISSP D7: Security Operations | Security+ D4: Security Operations | SSCP D4: Incident Response and Recovery
« Back to Glossary Index