Incident Response

Incident Response is a process of reacting to IT threats such as cyber attack, security breach, and server downtime.

Get Ahda Akmalul Ilmi’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

Other IT ops and DevOps teams may refer the practice as Major Incident Management or simply Incident Management.

Simple diagram of Incident Response

Incident Response may vary from company to company, but usually incident response follow this steps:

1. Detect Incident: Monitoring and alerting tools will detect and inform your team about the incident.
2. Team communication channel: The goal here is to establish and focus all incident team communication in well-known places.
3. Assess the impact and apply a severity level.
4. Communicate with customers.
5. Escalate to the right responders: More often than not, Incident Management teams need to bring other teams into the incident.
6. Delegate incident response roles: Assign an appropriate role for the team and it’s important that they understand what’s required of their role.
7. Resolve the incident.

In conclusion Incident Response are a fail switch for the company from the attacks from outside.