Planning is performed for developing and implementing the organization’s incident management and control process.
Staff are identified and assigned to the incident management plan.
A process for detecting, reporting, triaging, and analyzing events is established and maintained.
Events are detected and reported.
Events are logged and tracked from inception to disposition.
The process for collecting, documenting, and preserving event evidence is established and managed.
Events are analyzed and triaged to support event resolution and incident declaration.
Incidents are declared and analyzed to support response planning.
Incidents are declared based on criteria that are established and maintained.
Incidents are analyzed to support the development of an appropriate incident response.
Passcode