The art of responding to incidents in an organized and thoughtful manner.
Incident response, assumed to be information security incidents in this context, is an aspect of the Incident Management discipline. The development of an incident response procedure can take many forms, but always implies a pre-existing formal plan with the following goals:
- Limit damages whether they be monetary, reputation, or otherwise
- Reduce recovery time
- Prevent reoccurrences
The final product of an execution of the response procedure should always result in a formal report detailing the event.
See the CIRT (Computer Incident Response Team) Handbook for more information.
