NIST SP 800-61


The NIST SP 800-61 — Computer Security Incident Handling Guide identifies the following stages in an incident response life cycle:

  1. Preparation
  2. Detection and Analysis
  3. Containment
  4. Eradication and Recovery
  5. Post-Incident Activity

Resources