Incident response

This involves the ability to respond quickly to a security incident by identifying threats and implementing procedures to minimize damage and restore normal operations.