Software Architect's Handbook

Response

The detection of threats has value only if there are available responses. Plans for the responses to various attacks should be made in advance. You do not want to be making important decisions in the middle of an attack.

Examples of a physical security response include the sounding of an alarm and the locking of doors. An administrative security control with the purpose of responding to a security threat is an escalation plan that dictates the actions to be taken in the event of an attack. Another example is a service continuity plan that ensures the software application will continue to be operational even in the face of an unexpected event such as a security attack, a natural disaster, or some other event.

Technical security controls ...