Investigate Security Incident

Type: Process
Status: Planned
Industry Sector: Enterprise Core

Description:

Investigating security incidents and coordinating containment actions.

Parent Process: Manage Security Operations

Subprocesses:

None

Served by Application(s):

Security Information & Event Management Application
Security Operations Platform

Realizes Capabilities:

Security Operations Management
IT Security Management

Uses Information Object(s):

Security Incident
Vulnerability Record
Security Alert
Security Log
IT Incident

Performed by Role(s):

Security Operations Analyst
Cybersecurity Analyst
Security Manager

Triggers Process(es):

None

Planned Manage Security Operations Enterprise Core Security Operations ManagementIT Security Management Security Operations AnalystCybersecurity AnalystSecurity Manager

✏️ Edit process