Incident Response
Home»Incident Response
What happens if something goes wrong
A security incident is any confirmed or reasonably suspected event that compromises the confidentiality, integrity, or availability of a service or its data. Notification timelines are handled according to applicable contractual and legal requirements, not a fixed promise made here.
- 01
Detection
A security incident is identified through monitoring, an internal review, or a report from a customer or third party.
- 02
Containment
Immediate steps are taken to limit the scope and impact of the incident.
- 03
Investigation
The cause, scope, and affected systems or data are investigated.
- 04
Remediation
The underlying issue is fixed and affected systems are restored to a secure state.
- 05
Customer communication
Affected customers are informed according to the applicable contractual and legal requirements for that engagement.
- 06
Recovery
Normal service is restored, verified, and monitored for recurrence.
- 07
Post-incident review
The incident is reviewed to identify follow-up actions and reduce the likelihood of recurrence.