CC7.3 CC7

System Operations / CC7.3

Working out whether an event is actually an incident

Think of it likeDeciding whether the smell of burning is toast or a fire.

In plain English

Detected security events are evaluated to determine whether they constitute an incident, and triaged so that response effort matches the severity.