Incident Response (CIR)

From CyberEdWiki
Jump to: navigation, search

Incident Response responds to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security. Investigates and analyzes all relevant response activities. [NIST SP 800-181]

The Incident Response NICE Framework Specialty Area contains the following Work Roles: