External Sources

Question 1

List the four phases of the incident response process as documented in NIST 800-61r2

Answer 1

Preparation, Detection & Analysis, Containment Eradication & Recovery, and Post-Incident Activity

Question 2

Name the four stakeholders listed in the Cyber-security Capability Maturity Model

Answer 2

Decision makers, leaders, practitioners, facilitators