What is IR?
Incident response (IR) is the systematic approach taken by an organization to prepare for, detect, contain, and recover from a suspected cybersecurity breach. An incident response plan helps ensure an orderly, effective response to cybersecurity incidents, which in turn can help protect an organization’s data, reputation, and revenue.
How an organization responds to an incident can have tremendous bearing on the ultimate impact of the incident. Becoming the victim of a cyber attack is bad enough, but organizations that fail to take appropriate steps may find themselves vulnerable to employee or shareholder lawsuits or penalties from regulators. They may also find that their insurance company will not accept their claim if they did not take certain predetermined steps.