Mike Meyers' CompTIA Security+ Certification Guide (Exam SY0-401)

MODULE 39

Incident Response

Most organizations can’t afford to wonder if an incident will ever happen to them; they should really be wondering when, because negative events or incidents are going to happen to every organization at some point. Incident response is definitely not something that a business can simply “deal with when it comes”; an incident response program requires careful planning in advance. In this module, we’re going to discuss the basics of incident response, including planning, preparing, and executing a solid response. We’ll also discuss mitigation and recovery from incidents, and how to minimize the damage from a negative event by separating affected systems from the rest.

Incident Response Concepts

Several critical concepts ...