Skip to content

Glossary: Security+ Exam Prep 1: Strategy and Objective Review

Incident response

Also written: incident response phases, IR

The process for handling incidents: preparation, identification, investigation, containment, eradication and recovery, and lessons learned last. Notification isn't a strict step in that order; it often runs alongside containment because legal deadlines count from awareness.

Where the book teaches it

Related terms

ContainmentLessons learnedPlaybook