Incident response

Rationale

Contributing to incident response supports the rapid restoration of services and reduction of threat impact during security incidents.

How to do it

Support the incident team by providing evidence, technical input, or follow-up actions during investigations.

Expected Evidence

Submit evidence of your role in incident response through redacted documentation or meeting notes.