From the course: SSCP Cert Prep: 4 Incident Response and Recovery

Unlock the full course today

Join today to access over 24,200 courses taught by industry experts.

Reporting and documenting incidents

Reporting and documenting incidents

From the course: SSCP Cert Prep: 4 Incident Response and Recovery

Start my 1-month free trial Buy for my team

Reporting and documenting incidents

“

- [Instructor] Communication is an essential part of cybersecurity incident response efforts. Incident response teams must notify key stakeholders about the incident, provide updates, and maintain permanent records of security investigations. There are three important components to incident reporting. The first is notification, ensuring that everyone who needs to know about an incident is aware that an incident response effort is underway. The second is real-time updates, ensuring that those who need to be familiar with the response efforts are kept informed along the way. And the third is documentation, ensuring that there is a permanent record kept of the incident details and the response effort. Notification is a key responsibility of incident responders. As early as possible in an incident, responders should trigger notification of key personnel, both inside the organization and extra responders, if applicable. Every…

Contents