The process of responding to security incidents, from identifying to containing and mitigating the impact.