IR
Incident Response
The organized approach to handling and recovering from security incidents.
IR is the structured discipline of preparing for, detecting, containing, eradicating, and recovering from security events, followed by lessons learned. A practiced process limits damage, shortens downtime, and preserves evidence for analysis or legal use. It depends on defined roles, communication paths, and a tested plan rather than improvisation. IR is the broader function, while the IRP is the written document that codifies these phases and procedures.
Looking IR up is step one. Getting tested on it is step two.
A free account opens all 4 Domain 1 objectives, 271 exam-style questions with a lesson and a lab on each, a placement check that skips what you already know, and a dated plan. No card.
Not affiliated with or endorsed by CompTIA.