In addition to identifying suspicious messages, you need to have a plan to respond appropriately. Several frameworks or models exist to help support and lead the response efforts. The SANS organization has created and teaches one of the easiest and most relevant frameworks, PICERL, which is explained in this chapter. First, let’s discuss some terms that help us better understand this framework and then we will dive into PICERL.
A security incident is an occurrence that jeopardizes the confidentiality, integrity, or availability of ...
