Chapter 11Containment, Eradication, and Recovery
Chapter 9, “Building an Incident Response Program,” provided an overview of the steps required to build and implement a cybersecurity incident response program according to the process advocated by the National Institute of Standards and Technology (NIST). In their Computer Security Incident Handling Guide, NIST outlines the four-phase incident response process shown in Figure 11.1.
FIGURE 11.1 Incident response process
Source: NIST SP 800-61: ...
Get CompTIA CySA+ Study Guide, 3rd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
