• Plan de răspuns – detection, containment, eradication, recovery
  • Forensics – log analysis, evidence collection
  • Communication & Reporting – incident logs, stakeholder notifications