NIST SP 800-61
- Name
- NIST SP 800-61
- Publisher
- NIST
- Type
- Incident guidance
- What it is
Guidance on computer security incident handling.
- Key points
- Preparation
- Detection and analysis
- Containment, eradication and recovery
- Post-incident activity
- On the exam
Incident life cycle: preparation, detection and analysis, containment, eradication and recovery, post-incident activity.