Recovery
Eradication
Containment
Analysis
Detection
In this stage you recover and build up again, fixing everything the incident caused
In this stage you eradicate the incident and remove anything that can cause another
In this stage you contain the incident to avoid it causing any extra damage
In this stage you analyise how bad the incident is and what you can do to stop it
In this stage you detect when an incident is happening and start deciding what type of actions to take
Preperation
In this stage you prepare for the incident and plan out the next steps
Cycle
