Scripting/Automation & Incident Response (sec +)

Guardrails

policies and automated controls designed to prevent deviations from secure practices and expected behavior within systems and workflows

Technical debt

the accumulation of security vulnerabilities and risks resulting from shortcuts, outdated systems, and deferred security measures taken during development and IT operations

NIST SP 800-61

provides guidelines for establishing and maintaining effective Computer Security Incident Response Teams (CSIRTs) and for handling security incidents efficiently

Primary phases of the incident response lifecycle

Preparation, Identification/Detection & Analysis, Containment, Eradication, Recovery, and Lessons Learned