Incident Lifecycle
The end-to-end stages of handling a security incident, preparation, detection and analysis, containment, eradication, recovery, and post-incident learning, that structure incident response from readiness through to lessons learned.
Concept Neighborhood
Explore this concept’s connections in the groups below.
Start here
Post-Incident Review
A related concept to explore, covered by 13 lessons.
Post-Incident ReviewStart here
13
lessons
Security Incident
8
lessons
Incident Responder
7
lessons
Detection and Analysis
6
lessons
Incident Response
6
lessons
IR Execution
6
lessons
Show 13 more connections
Preparation
6
lessons
Severity Classification
6
lessons
Short-Term Containment
6
lessons
Containment
5
lessons
Incident Severity
5
lessons
Long-Term Containment
3
lessons
Recovery
3
lessons
Communication During Incidents
1
lesson
Continuous Improvement
1
lesson
Coverage Metrics
1
lesson
SOC-IR Interface
1
lesson
Workload IR
1
lesson
Web App Incident Response
0
lessons
Related Lessons
6 lessons cover this conceptDesign a Sustainable SOC Operating Model
General Beginner
Understand the Blue Team Mission
General Beginner
Follow the Current Incident-Response Model
General Beginner
Measure Operations Without Gaming Them
General Beginner
Exercise the Response Capability Safely
General Beginner
Learn with Safety and Accountability
General Beginner
Sign in to open lesson content directly.