After this lesson, you will be able to: Apply Respond: response planning, communications, mitigation.
Respond is the IR function. We covered it deeply in the IR track, this lesson maps it back to the CSF function structure.
Response Planning (RS.RP). IR plan exists, exercised. Communications (RS.CO), internal + external + regulatory. Analysis (RS.AN), investigations, forensic readiness. Mitigation (RS.MI), contain, eradicate. Improvements (RS.IM), post-incident lessons.
Many incident response failures aren't technical, they're about who's told what when. Define comms RACI in advance: who calls customers, who calls regulators, who runs the press.
Sign in and purchase access to unlock this lesson.