The follow-up to an unplanned event such as a hardware or software failure or attack against a computer or network. Incident response requires preparation, especially for attacks, because the breach may still be in the process of causing damage.
How an organization handles a security incident. Events are supposed to be tracked and resolved in as expeditious a manner as possible. Symantec Security Response. Glossary. [Online, July 15, 2004.] Symantec Security Response Website. http://securityresponse.symantec.com/avcenter/refa.html.