Incident Response Plan

What is an Incident Response Plan and why is it required?

An Incident Response Plan is a written document that helps your organization before, during, and after a security incident. The NIST Incident Response Plan provides detailed guidelines for organizations. The objective is to minimize the overall impact of cyber incidents. The eight basic elements of an incident response plan are Preparation, Identification, Containment, Eradication, Recovery, Investigation, Notification, and Post-incident activities. With all of these in place, companies can handle cybersecurity incidents well. CISA recommendations serve as good guidelines. https://www.cisa.gov/sites/default/files/publications/Incident-Response-Plan-Basics_508c.pdf