Ravi Sir's Cyber Security Cards › Revision Cards
The incident response lifecycle
Revision card: The incident response lifecycle. Easy English, with a real example. Scan the QR for the full lesson.
Read card text
What this card says
| Phase | Job |
|---|---|
| Preparation | plans, backups |
| Detection | spot and confirm |
| Contain, clean, recover | stop and restore |
| Post-incident | learn, fix root cause |
In one line
Incident response has four phases: prepare, detect, contain-clean-recover, then learn from it.
Note
Example: the 4 phases of the NIST incident response lifecycle.
Learn more in the lesson: 31.6 The Incident Response Lifecycle