DevSecOps·DevSecOps essentials

Response

Security incidents need a runbook and clear ownership.

Intermediate 10 min read Lesson 5 of 150 Challenge included
What you will be able to do
  • Define severity levels.
  • Keep contacts current.
  • Practise a drill.

In plain English

Security incidents need a runbook and clear ownership.

  • Define severity levels.
  • Keep contacts current.
  • Practise a drill.
runbook.txtText
1. Confirm and contain
2. Preserve evidence
3. Eradicate and recover
4. Review and improve
Your turn

Explain it back

Easy

Answer from memory: What is the first step in incident response?

TEXT · starter
Your answer…
Check your understanding before moving on.
Knowledge checkQuestion 1

What is the first step in incident response?

Select an answer to continue
Study tools

Make it yours.

Keep a private note for this lesson, then turn the key ideas into flashcards you can revisit.

Sign in to save notes and flashcards.Both are private to your account and stay with your progress.
Sign in
Finished reading?

Lock in what you just learned.

Mark this lesson complete to save your place and move one step closer to the certificate.

Lesson 5 of 150 · 0% of course