Incident Response

The code is_incident marks whether a reported event qualifies as a security incident that activates the institution's formal response procedures. In the FFIEC IT Examination Handbook it is used to evaluate the effectiveness of incident detection, reporting and remediation processes.