Title: Summarize the importance of policies, processes, and procedures for incident response.
Course: Cybersecurity Operations, Advanced (10302-III) > Section: Exploring Operations and Incident Response

Summarization should include

- incident response plans
- incident response processes
  - preparation
  - identification
  - containment
  - eradication
  - recovery
  - lessons learned

- exercises
  - tabletop exercises
  - walkthroughs
  - simulations

- attack frameworks
  - MITRE Att&ck
  - Cyber Kill Chain

- communication plan
- disaster recovery plan
- business continuity plan
- Continuity of Operations Planning (COOP)
- incident response team.