IR Incident Response Types

Subcategories of IR Incident Response Types

• IR.01Preparation Phase
• IR.02Detection and Analysis
• IR.03Containment Strategy
• IR.04Eradication
• IR.05Recovery
• IR.06Post-Incident Review
• IR.07Incident Classification
• IR.08Escalation Procedure
• IR.09Communication Plan
• IR.10Evidence Preservation
• IR.11Digital Forensics
• IR.12Tabletop Exercise
• IR.13Incident Metrics (MTTD/MTTR)
• IR.14Ransomware Response
• IR.15Regulatory Notification

Frequently asked questions

What is Incident Response IR?

Incident Response IR is "Incident Response Types". Incident Response code IR covers "Incident Response Types" at level 1 of the Incident Response hierarchy.

What does Incident Response IR include?

IR Incident Response Types contains 15 direct subcategories: IR.01 Preparation Phase; IR.02 Detection and Analysis; IR.03 Containment Strategy; IR.04 Eradication; IR.05 Recovery; IR.06 Post-Incident Review; and more.

How does Incident Response IR map to other classification systems?

IR Incident Response Types has equivalents in NAICS 2022 (5415, 5417). These crosswalks let you translate this code between Incident Response and 1 other classification system.

What is the parent category of IR?

IR Incident Response Types sits under IR Incident Response Types in the Incident Response hierarchy.