THREAT‑WATCH
Glossary
Incident Response
The structured process of detecting, containing, investigating, and recovering from a security incident.
Incident response typically follows a lifecycle: preparation, detection and analysis, containment, eradication, recovery, and post-incident review. Organizations with a pre-agreed incident response plan (and ideally a retainer with a response provider) recover faster and with less damage than those improvising after the fact.