home/dictionary/Incident Handling

Incident Handling

nounverified· unreviewed·updated Aug 30, 2026

The mitigation of violations of security policies and recommended practices.

Framework senses

SANS Glossary of Security Terms1 senseview framework →
§1
Incident Handling is an action plan for dealing with intrusions, cyber-theft, denial of service, fire, floods, and other security-related events. It is comprised of a six step process: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned.
NISTIR 7298: Glossary of Key Information Security Terms, Revision 21 senseview framework →
§1
The mitigation of violations of security policies and recommended practices.
NIST SP 800-611 senseview framework →
§1
The mitigation of violations of security policies and recommended practices.
NIST SP 800-171r31 senseview framework →
§1 · attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
Increment 2: attested in 800-171r3 without a glossary definition.
Legacy lexicon import1 senseview framework →
§1 · legacy_primary
The mitigation of violations of security policies and recommended practices.
DR-088 backfill from the noun definition column