Cybersecurity glossary
What is incident response?
Also known as: IR, incident response plan
Definition
Incident response is the organized process of preparing for, detecting, containing, eradicating and recovering from security incidents, then learning from them.
Why it matters
NIST SP 800-61 Rev. 3 frames incident response within overall cybersecurity risk management using the NIST CSF functions. A written plan with named roles, contacts and practiced steps shortens the time from detection to recovery.
Common questions about incident response
- What should I do first if ransomware hits my business?
- What should a small business incident response plan include?
- What is a cybersecurity tabletop exercise?
- What security policies does a small business need?
- What is cyber insurance and does a small business need it?
- Should you pay a ransomware ransom?
- How quickly must a business report a data breach?
- How do I answer a customer security questionnaire?
Sources
Related Guides
GuideSmall Business Security
How to Write an Incident Response Plan Small Business Owners Use
Learn how to write an incident response plan small business teams can execute quickly. Protect operations, contain threats, and recover critical systems.
Read more GuideSmall Business Security
10 Small Business Cybersecurity Tips to Reduce Risk Fast
Protect your company with ten practical small business cybersecurity tips. Implement MFA, patch software, secure Wi-Fi, and build backups that work.
Read more GuideIncident Response
How to Backup Data on Windows 11: A Step-by-Step Guide
Learn how to backup data on Windows 11 using built-in tools, external drives, and isolation practices to defend against hardware failure and ransomware.
Read more GuideGRC
7 Steps for GDPR Data Breach Response: A Tactical Plan
Execute a compliant GDPR data breach response with this 7-step guide covering containment, risk assessment, supervisory notification, and internal logging.
Read more