Skip to content

Glossary: CompTIA Security+ SY0-801 Exam Prep

Incident response

Also written: IR, IR order

The process for handling an incident, in this order: preparation, detection, analysis, containment, eradication, recovery, lessons learned.

Where the book teaches it

Related terms

ContainmentEradicationRecoveryLessons learned