CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide, 2nd Edition

Chapter 15

The Incident Response Process

This chapter covers the following topics related to Objective 4.1 (Explain the importance of the incident response process) of the CompTIA Cybersecurity Analyst (CySA+) CS0-002 certification exam:

• Communication plan: Describes the proper incident response processes for communication during an incident, which includes limiting communications to trusted parties, disclosing based on regulatory/legislative requirements, preventing inadvertent release of information, using a secure method of communication, and reporting requirements.

• Response coordination with relevant entities: Describes the entities with which coordination is required during an incident, including legal, human resources, public relations, ...