Planning and preparing for unexpected security incidents is perhaps one of the most difficult challenges for security practitioners. With a robust incident response (IR) plan, professionals can follow a foundation or standard for handling incidents.
Preparation
A security team needs to prepare for a security incident whenever necessary. Preparation is one of the most essential steps to an incident response plan because it determines how the IR team will respond to a myriad of incidents that may affect the organization.
https://cipher.com/blog/the-core-phases-of-incident-response-remediation/
