IR policy
Definition
A management-approved governance statement that commits the organisation to an incident response programme, defines its scope, and grants authority to designated teams. Typically one to three pages; rarely changes unless organisational strategy or legal obligations shift.
Related terms
- Business continuity plan (BCP)
- A document that specifies how an organisation keeps critical business functions operating during a significant disruption. The IR plan and BCP must...
- Communication matrix
- A structured table in an IR plan that maps incident severity tiers to mandatory notification recipients, timelines, and communication channels. It removes...
- Disaster recovery plan (DRP)
- A plan focused on restoring IT systems and data after a major failure or destructive event. Often a subset of BCP. The...
- IR plan
- The operational document that translates the policy into specific procedures, roles, severity tiers, communication chains, and recovery criteria. Versioned and reviewed at...
- Scope statement
- The formal declaration at the start of a forensic report that defines what question the examiner was asked to answer. A scope...
Explained in
- Incident Response Policy and PlanA management-approved governance statement that commits the organisation to an incident response programme, defines its scope, and grants authority to designat...