3.3 Explain the preparation and post-incident activity phases of the incident management life cycle

• Preparation

  • Incident response plan
  • Tools
  • Playbooks
  • Tabletop
  • Training
  • Business continuity (BC)/
    disaster recovery (DR)
    • Post-incident activity
  • Forensic analysis
  • Root cause analysis
  • Lessons learned