Incident response

• Determine the nature and scope of the incident

• Contact key management personnel

• Solve problem and get system back to normal operations

• Execute nontechnical actions

• Learn from the incident