ISSC 262 APUS Incident Response Key Phases Discussion Reply

Write Peer Response Disc:

Good morning class,

This week has been flying by, I hope all is well. 

The phases listed on this week’s discussion certainly follow an order and they are all vital to follow through with the incident response however If I had to choose which ones were the most crucial in the process it would be Incident Identification, Containment and Debriefing and feedback. Incident Identification: An incident cannot be addressed if it remains unreported. When an incident is quickly and accurately identified, organizations can move quickly to start the response process. The potential damage rises with the length of time an incident is unreported. Containment: At this point, the organization moves quickly to contain the problem, lessen its effects, and stop it from getting worse. It resembles extinguishing a fire before it gets bigger. 

The final phase is Debriefing and Feedback. Here, the security team evaluates the incident response procedure, points out areas in need of development, and offers suggestions to improve incident response operations going forward. Enhancing the organization’s security posture is an ongoing learning process.

I like to think of these three phases as, identify the issue, stop it from happening, and ensure it does not happen again by learning from it. 

I look forward to reading your top crucial phase/phases! 

-Miguel Gomez