Security

Incident response

A plain-language guide to the terminology of cybersecurity.

Meaning

A coordinated process for understanding, containing and recovering from a cybersecurity incident.

In practice

A team isolates an affected account, preserves relevant logs and restores access after securing the system.

Explore the framework

Read more in the relevant legal or policy document.

Strategy · 2022National Cybersecurity Strategy 2022 - 2027

This explanation is not a substitute for the statutory definition or the official document.

← Back to the glossary