Which of these is NOT a part of incident response?

A.  Preparation

B.  Eradication

C.  Containment

D.  Escalation

Correct Answer:  D

Explanation:

Preparation: This involves creating incident response plans, training incident response teams, and equipping them with the tools and resources they need to manage incidents.

Eradication: Once the cause of the incident is identified, it is completely removed from the environment.

Containment: This phase involves limiting the damage of the incident and isolating affected systems to prevent further damage.

Escalation: While the concept of escalating incidents to higher levels of management or specialized teams may be a part of the broader incident management process, it is generally not considered a distinct phase of the incident response lifecycle.