Incident response – Recovery: Recovery involves returning affected systems to normal operation after an incident has been resolved. This may include restoring data, rebuilding systems, or updating software. For example, a company may need to restore data from backups after a ransomware attack or rebuild a server that has been compromised.
Categories: CC D5: Security Operations | CCSP D5: Cloud Security Operations | CISM D4: Incident Management | CISSP D7: Security Operations | Security+ D4: Security Operations | SSCP D4: Incident Response and Recovery
« Back to Glossary Index