Summary of The Six Phases of Incident Response

00:00:00 - 00:05:00

The video discusses the six phases of incident response. Each phase has specific procedures that need to be followed in order to prevent or minimize damage. If a company suspects that it has been compromised, it should contact an incident response company to help guide through the process.

• 00:00:00 The Six Phases of Incident Response are Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned. Preparation involves making sure you have a trained incident response team in place, Identification involves reviewing log files and other data to identify an incident, Containment involves locking down systems and isolating compromised accounts, Eradication removes and remediates any damage caused by an incident, and Recovery tests fixes and restores systems to normal. Lessons Learned reviews steps taken during each phase of an incident and improves incident response capability and security.
• 00:05:00 The video discusses the six phases of incident response. Each phase has specific procedures that need to be followed in order to prevent or minimize damage. If a company suspects that it has been compromised, it should contact an incident response company to help guide through the process.