Glossary

Phase 5: Recovery (1-72 hours)

Restore normal operations - Re-enable any revoked access (with corrected permissions) - Increase monitoring for 30 days post-incident

Learn More

Related Terms