Question: The computer incident response team ( CIRT ) has informed the executives of a large financial institution of unusual network activity, indicating a potential breach.
The computer incident response team CIRT has informed the executives of a large financial institution of unusual network activity, indicating a potential breach.
Which phase of the incident response lifecycle involves investigating the reported unusual network activity to determine whether a genuine security incident has occurred and assessing the severity of the situation?
Eradication
Containment
Analysis
Preparation
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
