Security Incident Response
(การตอบสนองเหตุการณ์ด้านความปลอดภัย)
Definition
Security Incident Response (การตอบสนองเหตุการณ์ด้านความปลอดภัย) Hard Skill
The process of identifying, managing, and mitigating security breaches or attacks to minimize impact and restore normal operations effectively.
Expertise Level
Level 1
Basic
1. Understands common types of security incidents and basic terminology.
2. Can follow predefined incident response procedures under supervision.
3. Identifies and reports potential security incidents promptly.
Level 2
Intermediate
1. Conducts initial analysis and containment of security incidents independently.
2. Uses security tools to investigate and document incidents.
3. Coordinates with relevant teams to mitigate threats and recover systems.
Level 3
Advanced
1. Leads the full security incident response lifecycle, including detection, analysis, containment, eradication, and recovery.
2. Develops and improves incident response plans and playbooks.
3. Analyzes complex incidents to identify root causes and recommend strategic security improvements.
