Incident Response

Incident response is the set of actions used to detect, contain, investigate, and recover from a security event. In identity-heavy environments, it also includes revoking compromised accounts, invalidating secrets, and re-establishing trusted access without reintroducing the breach path.