QuestionQ80
VerifiedIncident ResponseOne week after a ransomware attack disrupted operations, Sarah, a SOC analyst, leads a review meeting with the IT team, security engineers, and business-unit representatives. The group reviews the incident timeline, calculates a business impact of $157,000 from downtime and data loss, and identifies seven critical improvements to strengthen detection and response processes. Which Incident Response phase is this?
Community Discussion