Glossary: Security Operations and Incident Response

Preparation

Everything done before an incident so the team can respond well: the plan, contacts, tools, logging, training, tests, exercises and outside help on retainer.