Incident response

Incident response is the process of detecting, containing, remediating, and recovering from violations of security policy, whether that's a malware infection, a data breach, or unauthorized access. See the OT/ICS-specific entry for how this differs when a physical process is involved.