CompTIA CySA+ Cybersecurity Analyst Certification All-in-One Exam Guide, Second Edition (Exam CS0-002), 2nd Edition

CHAPTER 15

The Importance of the Incident Response Process

In this chapter you will learn:

•   The importance of establishing communications processes

•   Which factors contribute to data criticality

•   How unauthorized disclosure may create serious adverse effects

I am prepared for the worst, but hope for the best.

—Benjamin Disraeli

While it’s hard to predict when and how an incident will occur, it’s certain that it will happen at some point. Good security teams will have taken measures to minimize the likelihood of an incident by hardening the network and addressing vulnerabilities, but great teams will go a step further and outline the exact steps necessary to address an incident when the time comes. The activities necessary to accomplish ...