home/glossary/incident response

incident response

nounid 2815·updated Aug 28, 2026
verified

The purpose of this task is to address and manage the aftermath of a disaster or other significant event that may affect the organization's people or ability to function productively.

MWE

Attested in

NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems27 citations · 27 machine-matched · observed 2026-09-01 under anchor/0.9/36451/2026-09-01
03.03.05.c ¶ 103.06.01 ¶ 103.06.02.b03.06.02.d03.06.02.d ¶ 103.06.02.d ¶ 103.06.0303.06.03 ¶ 103.06.03 ¶ 203.06.03 ¶ 203.06.0403.06.04.a03.06.04.a.103.06.04.b03.06.04.b ¶ 103.06.04.b ¶ 103.06.0503.06.05.a03.06.05.a.103.06.05.a.203.06.05.a.303.06.05.b03.06.05.c03.06.05.d+3 more

Classifications

Entity Type

Process95%rule-basedr:entity.process.workflow.v1

Sensitivity

unclassified

Information Class

unclassified

Variants

synonym
action arising from disruptive incident
alternatephrasing
Incident Response
plural
incident responses
possessive
incident response's
pluralpossessive
incident responses'

Framework definitions

National Initiative for Cybersecurity Careers and Studies (NICCS) Cybersecurity Lexicon1 senseview framework →
§1 · extended_definition_available
The activities that address the short-term, direct effects of an incident and may also support short-term recovery.
ISACA Cybersecurity Glossary1 senseview framework →
§1
The response of an enterprise to a disaster or other significant event that may significantly affect the enterprise, its people, or its ability to function productively An incident response may include evacuation of a facility, initiating a disaster recovery plan (DRP), performing damage assessment, and any other measures necessary to bring an enterprise to a more stable status.
FFIEC Cybersecurity Assessment Tool, Baseline, May 20171 senseview framework →
§1
The purpose of this task is to address and manage the aftermath of a disaster or other significant event that may affect the organization's people or ability to function productively.
NY DFS Part 500 (NYCRR Title 23, Chapter 1, Part 500)1 senseview framework →
§1
The purpose of this task is to address and manage the aftermath of a disaster or other significant event that may affect the organization's people or ability to function productively.
Defining an "AI Incident Response"1 senseview framework →
§1
a public official response to an incident ... from an entity (i.e. company, organization, individual) allegedly responsible for developing or deploying the AI or AI system involved in said incident.
NIST SP 800-171r31 senseview framework →
§1 · attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 24 citations in that document; a definition is pending curation.
Increment 2: attested in 800-171r3 without a glossary definition.
Legacy lexicon import1 senseview framework →
§1 · legacy_primary
The purpose of this task is to address and manage the aftermath of a disaster or other significant event that may affect the organization's people or ability to function productively.
DR-088 backfill from the noun definition column

Outgoing relationships

related

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.