What is computer security incident management?
Computer security incident management refers to the monitoring, detection and response of events on a computer or computer network – particularly security events.
The first step in managing security incidents is to conduct risk assessment and to build policies and processes of how to handle the incidents for business continuity.