Incident Response (IR)

GPTKB entity

Statements (51)
Predicate Object
gptkbp:instanceOf cybersecurity process
gptkbp:alsoKnownAs gptkb:IR
gptkbp:component cybersecurity program
gptkbp:definedIn gptkb:NIST_SP_800-61
gptkbp:goal minimize impact of security breaches
https://www.w3.org/2000/01/rdf-schema#label Incident Response (IR)
gptkbp:involves analysis of security events
coordination with stakeholders
remediation actions
reporting incidents
gptkbp:performedBy management
security analyst
IT staff
incident responder
gptkbp:purpose manage and mitigate security incidents
gptkbp:regulates gptkb:HIPAA
gptkb:PCI_DSS
gptkb:SOX
gptkb:NIST
gptkb:GDPR
gptkb:ISO/IEC_27035
gptkbp:relatedStandard gptkb:ISO/IEC_27035
gptkb:NIST_SP_800-61
gptkb:SANS_Incident_Handler's_Handbook
gptkbp:relatedTo gptkb:security
risk management
disaster recovery
digital forensics
security monitoring
business continuity
threat intelligence
data breach
security incident
cyber attack
gptkbp:requires manual
communication tools
forensic tools
communication plan
evidence preservation
incident detection tools
incident response plan
gptkbp:step recovery
identification
preparation
lessons learned
containment
eradication
gptkbp:usedBy gptkb:security
incident response team
gptkbp:bfsParent gptkb:NIST_Special_Publication_800-53
gptkbp:bfsLayer 6