PICERL - Common incident response process / framework
Incident Response Phases – Identification
Identification is the second phase of the IR Cycle. This is where you determine if an incident has happened, what type of incident and how important it is to your business.