An organized approach to addressing and managing the aftermath of a security breach or attack (also known as incident). The goal is to handle the situation in a way that limits damage and reduces recovery time and cost.
