312-39V2: Certified SOC Analyst v2

An incident response policy establishes the organization’s governance and management requirements for incident response, including performance measures and expectations for managing the program. NIST identifies performance measures as an incident response policy element, while procedures are detailed technical processes based on the policy and plan.