In which of the following phases of incident handling and response (IH & R) process the identified security incidents are analyzed, validated, categorized, and prioritized?
Incident triage is the phase in the incident handling and response process where identified security incidents are analyzed, validated, categorized, and prioritized. This step is critical for determining the severity of incidents and deciding on the allocation of resources for effective response. It involves initial analysis to understand the nature of the incident, its impact, and urgency, which guides the subsequent response actions.
[References:The incident triage phase is a foundational concept in the ECIH v3 curriculum, emphasizing the importance of a structured approach to responding to security incidents, ensuring that resources are focused where they are needed most., , , , ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit