CISSP Conduct Incident Management – Bk1D7T7
From an academic perspective, events and incident are closely related and defined. An event is anything that can be measured within your environment, and an incident is an unscheduled or out-of-the-ordinary event. However, this definition might not provide sufficient practical description of incidents; the following additional explanation may be used to clarify the point. A security incident is an event that did the following: Had a negative impact on an IT system: This is the …
