Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
An incident response plan documents how an organization detects, contains, and recovers from security incidents, often following NIST SP 800-61.
Incident Response Plan Definition: An incident response plan documents how an organization detects, contains, and recovers from security incidents, often following NIST SP 800-61.
An incident response plan is a documented, pre-approved set of procedures that defines how an organization detects, analyzes, contains, eradicates, and recovers from security incidents. It assigns roles and responsibilities, communication and escalation paths, and post-incident review steps so teams can respond consistently under pressure. The structure commonly follows recognized lifecycles such as the NIST SP 800-61 phases or the SANS six-step model.
Incident Response Plan is one of the topics you'll master in the ECIH Boot Camp.
ECIH Boot Camp →