Skip to main content

Incident Response

Incident Response is a systematic approach in information security that managers and IT professionals employ; involving detection, identification, and analysis of security incidents, followed by containment, eradication, and recovery actions, while simultaneously ensuring documentation, communication, and post-incident review for continuous improvement and prevention strategies.

Level 1: Emerging

At an emerging level, you are beginning to understand key concepts of incident response within information security. You're gaining experience in identifying, responding to, and mitigating security threats.

Level 2: Proficient

At a proficient level, you are able to effectively identify and respond to security incidents in a timely manner, minimizing impact and ensuring swift resolution to protect information assets.

Level 3: Advanced

At an advanced level you are able to lead and coordinate the response to security incidents, utilizing advanced technical skills and knowledge to quickly identify and mitigate threats in a timely manner.

Where is this capability used?