Glossary: Security+ Exam Prep 1: Strategy and Objective Review
Incident response
Also written: incident response phases, IR
The process for handling incidents: preparation, identification, investigation, containment, eradication and recovery, and lessons learned last. Notification isn't a strict step in that order; it often runs alongside containment because legal deadlines count from awareness.