Which stage of incident handling involves reporting events?

Which stage of incident handling involves reporting events?

• A. Containment
• B. Follow-up
• C. Recovery
• D. Identification

Answer: (D)

Reporting events happens when you first detect something abnormal and realize it qualifies as an incident. In incident handling, the initial stage is identification (detection and reporting). It involves recognizing the event, confirming it’s an incident, documenting basic details, and escalating to the incident response team. This is distinct from containment, which aims to stop the spread; recovery, which restores systems; and follow-up, which records lessons learned after the fact. So, identification is the stage that involves reporting events because it marks the moment the incident is acknowledged and communicated to the responders.

Reporting events happens when you first detect something abnormal and realize it qualifies as an incident. In incident handling, the initial stage is identification (detection and reporting). It involves recognizing the event, confirming it’s an incident, documenting basic details, and escalating to the incident response team. This is distinct from containment, which aims to stop the spread; recovery, which restores systems; and follow-up, which records lessons learned after the fact. So, identification is the stage that involves reporting events because it marks the moment the incident is acknowledged and communicated to the responders.