Security Incident Response

Start with incident types

The mind map on incident response introduces key terms, including security events and security incidents. Start there if you want to get familiar with the language used on the page. Then look at the maps on cyber security incidents. They include unauthorized access, information disclosure, modification of data, inaccessible data and destruction. Use the branches to see how the listed types differ.

Explore impacts and actions

After looking at incident types, open “Impacts of cyber security incidents”. It covers loss of confidentiality and the effect that losing data can have on trust. Other impact maps also discuss availability, including a website being down or inaccessible.

Next, look at “Actions to take after an attack”. The listed maps describe predefined actions to resolve a situation and reduce the chance of it happening again. One also introduces an investigation into the type of attack.

Use maps with a quiz

This page lists mind maps rather than quizzes. You can still use a map to prepare questions: choose a branch, such as information disclosure or loss of confidentiality, and check whether you can explain it before looking back at the map.

A free account lets you make your own quiz and save your scores. Use your questions alongside the maps, then return to the branches you want to study again.

Connect your study

Security Incident Response is a section of the Cybersecurity Fundamentals unit in Cybersecurity. The maps on this page give school students material for tracing a path from incident types to impacts and actions. Teachers can also use that sequence when selecting material for students. Choose a map and follow its branches at your own pace.