Incident Handling Process Steps

Incident Handling Process Steps for Cisco CyOps Associate

Step 1 : Identification

Determining whether there is an incident

Step 2 : Scoping

Determining the extent of the incident and identifying the attackers

Step 3 : Containment

Halting the spread of the incident and minimizing the impact

Step 4 : Remediation

returning the environment to the original state

Step 5 : Lessons-based hardening

Preventing future incidents

Step 6 : Reporting

Documenting the incident and reporting it