Guidance
Incident management
How to effectively detect, respond to and resolve cyber incidents.
Page 7 of 7
Appendix: Incident timelines
iStock.com/Medesulda
Examples of how to manage certain incidents
The diagrams below walk you through a set of typical incident responses.
Activity at each stage is explained in outline with accompanying notes in green, highlighting the function of the Incident Response (IR) plan.
We have chosen to cover four major incident types. Each illustrates how the various capabilities and skills which make up an IR response should interact. It also shows how they are interdependent.
Thus, the decisions made at each point during an incident are not rigidly structured. Instead, they rely on the availability of expertise backed by appropriate permissions.
Fraud
Malicious code
Ransomware
Targeted attack - to steal client data
