Back to Glossary

Operational process

Incident Handling

Operational activities across the Incident lifecycle, from reporting and analysis through containment to closure and documentation.

Related domain: CybersecurityConcept ID: concept-incident-handling

Definition

Incident Handling is the set of operational activities performed throughout an Incident's lifecycle, from reporting and analysis through containment to closure and documentation.

Human Explanation

Incident Handling defines who performs each action, when it happens and how the work leads to resolution.

Why it Matters

A structured approach reduces confusion, supports cooperation between teams and preserves a complete history of the Incident.

Conceptual Boundary

Incident Handling is not limited to fixing a technical problem. It also includes documentation, communication and assessment of the actions taken.

Practical Perspective

A well-prepared handling process makes action more repeatable and helps the organisation improve after every Incident.

Related Concepts