Skip to main content

Incident Response

Incident Response is a systematic approach in information security that managers and IT professionals employ; involving detection, identification, and analysis of security incidents, followed by containment, eradication, and recovery actions, while simultaneously ensuring documentation, communication, and post-incident review for continuous improvement and prevention strategies.

Foundational

At an emerging level, you are beginning to understand key concepts of incident response within information security. You're gaining experience in identifying, responding to, and mitigating security threats.

Developing

At a proficient level, you are able to effectively identify and respond to security incidents in a timely manner, minimizing impact and ensuring swift resolution to protect information assets.

Proficient

At an advanced level you are able to lead and coordinate the response to security incidents, utilizing advanced technical skills and knowledge to quickly identify and mitigate threats in a timely manner.

Advanced

Expert

Where is this capability used?