Which of the following activities represents the initial stage of the incident response process?
Detection is the initial operational incident-response activity: an organization identifies a possible security incident and analyzes it to determine whether it is genuine. Containment occurs after detection and analysis, while verification and formal declaration depend on the detected incident being assessed or confirmed.
Community Discussion