What is Incident Response (IR)?

Incident Response occurs when an incident has been identified and must be addressed. Oftentimes incident response requires a specialized team to resolve and can include both technical and business level activities. The goal of IR is to reduce costs and damage caused by the attack. Identifying the cause of the attack is key in IR as it helps prepare a system to defend itself from similar attacks in the future.