home/glossary/Incident Handling

Incident Handling

nounverified· unreviewed·updated Aug 30, 2026

The mitigation of violations of security policies and recommended practices.

MWENISTIR 7298: Glossary of Key Information Security Terms, Revision 2

Senses

SANS Glossary of Security Terms

Incident Handling is an action plan for dealing with intrusions, cyber-theft, denial of service, fire, floods, and other security-related events. It is comprised of a six step process: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned.

NIST SP 800-171r3attested usage pack match

No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.

Classifications

Entity Type

Process0%rule-basedmulti_axis_classifier_low_confidence.v1
?unassignedlast reviewed

Sensitivity

80%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Information Class

85%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Variants

plural
Incident Handlings
possessive
Incident Handling's
pluralpossessive
Incident Handlings'