NIST SP 800-61

Handling an Incident

3. Containment, Eradication, and Recovery


Figure 3-3. Incident Response Life Cycle (Containment, Eradication, and Recovery)