NIST SP 800-61
The NIST SP 800-61 — Computer Security Incident Handling Guide identifies the following stages in an incident response life cycle:
- Preparation
- Detection and Analysis
- Containment
- Eradication and Recovery
- Post-Incident Activity

The NIST SP 800-61 — Computer Security Incident Handling Guide identifies the following stages in an incident response life cycle:
