Incident management

Description: Focuses on effective response and recovery when security incidents occur. Behaviours in this category emphasise swift reporting, coordinated response, and post-incident analysis to minimise damage and prevent future occurrences.