IT Examiner School - Oct 2023

Internal Use Only

NIST vs. SANs IRP Process

NIST

SANS

1.Preparation 2.Detection & Analysis 3.Containment, Eradication & Recovery 4.Post-Incident Activity

1.Preparation 2.Identification 3.Containment 4.Eradication 5.Recovery 6.Lessons Learned

67

Internal Use Only

68