Incident Response

No security system is perfect. When a security incident occurs, having a well-practiced incident response plan can mean the difference between a minor disruption and a catastrophic breach. This chapter covers incident response planning, detection, containment, and post-incident activities.