header bg

Question:

When an incident report has taken place what is the first step in doing effective incident response?

A Confirm that an incident happened.
Explaination

The first step is to validate that an incident has occurred or is currently occurring. After you've recognized this, you may continue to the next phase in the incident response process.