NIST SP 800-61 (Incident Response Lifecycle)

Updated 31 Jul 2026

•
def
- •
  NIST Special Publication 800-61 (Computer Security Incident Handling Guide), which defines the standard incident response lifecycle
•
lifecycle
- •
  preparation
- •
  detection and analysis
- •
  containment, eradication, and recovery
- •
  post-incident activity
•
related
- •
  Incident Response
•
cards
- •
  What are the 4 phases of the NIST incident response lifecycle?
  - •
    Preparation; Detection and Analysis; Containment, Eradication and Recovery; Post-incident Activity

Linked references 2