Defensive Security (Blue Team) / Response and recovery
Lesson 25 of 32
Incident response
The incident response cycle: prepare, detect and analyse, contain, eradicate, recover, and learn lessons. Having a plan before the bad day matters most.
Key points
- Prepare a written plan
- Contain before you clean
- Hold a lessons-learned review
Quiz · +10 XP
What is the first phase of incident response?
Log in to save progress and earn XP.