Computer Security Incident Management

What is computer security incident management?

Computer security incident management refers to the monitoring, detection and response of events on a computer or computer network – particularly security events.

The first step in managing security incidents is to conduct risk assessment and to build policies and processes of how to handle the incidents for business continuity.