CYBER SECURITYINSIGHTS·4 MIN READ>
CPO Magazine – Ben Charnota And Ashley Hernandez
A simple framework for successful IR can be broken down into Before, During, and After incidents occur.

Before: Preparation is critical We break it down into four pillars: Detection and Reporting, Triage and Analysis, Containment and Neutralization, and Recovery. During: Education, cultural factors, and good processes Organizations need to do two important things:

Educating employees Establishing a culture of trust After: Developing the sophistication to be proactive about security After any significant event, an organization must move to establish a ânew normal.â This is an opportunity to find areas of improvement and become even better prepared.
Link: https://www.cpomagazine.com/cyber-security/the-before-during-and-after-of-successful-enterprise-incident-response/