Incident response lifecycle in Cybersecurity - Mini Project: Build & Apply

Incident Response Lifecycle

📖 Scenario: You work in a company's cybersecurity team. Your team needs to understand the steps to handle security incidents effectively. This helps protect the company's data and systems from harm.

🎯 Goal: Build a clear list of the main phases in the incident response lifecycle. This list will help your team follow the right steps when a security incident happens.

📋 What You'll Learn

Create a list called incident_phases with the exact phases of the incident response lifecycle.

Add a variable called current_phase to hold the phase the team is working on.

Use a for loop to go through each phase in incident_phases.

Add a final step to mark the lifecycle as complete with a variable called lifecycle_complete set to True.

💡 Why This Matters

🌍 Real World

Cybersecurity teams use the incident response lifecycle to handle security threats quickly and effectively, minimizing damage.

💼 Career

Understanding and applying the incident response lifecycle is essential for roles like security analyst, incident responder, and cybersecurity manager.

1

Create the incident response phases list

Create a list called incident_phases with these exact phases in order: 'Preparation', 'Identification', 'Containment', 'Eradication', 'Recovery', and 'Lessons Learned'.

Cybersecurity

# Create the list of incident response phases
# Your code here

Need a hint?

Use square brackets [] to create a list and separate each phase with commas.

2

Set the current phase variable

Create a variable called current_phase and set it to the first phase in the incident_phases list.

Cybersecurity

incident_phases = ['Preparation', 'Identification', 'Containment', 'Eradication', 'Recovery', 'Lessons Learned']
# Set current_phase to the first phase in incident_phases
# Your code here

Need a hint?

Use index 0 to get the first item from the list.

3

Loop through all incident phases

Use a for loop with the variable phase to go through each item in the incident_phases list.

Cybersecurity

incident_phases = ['Preparation', 'Identification', 'Containment', 'Eradication', 'Recovery', 'Lessons Learned']
current_phase = incident_phases[0]
# Loop through each phase in incident_phases
# Your code here

Need a hint?

Use for phase in incident_phases: to loop, then update current_phase inside the loop.

4

Mark the lifecycle as complete

Create a variable called lifecycle_complete and set it to True to show the incident response lifecycle is finished.

Cybersecurity

incident_phases = ['Preparation', 'Identification', 'Containment', 'Eradication', 'Recovery', 'Lessons Learned']
current_phase = incident_phases[0]
for phase in incident_phases:
    current_phase = phase
# Set lifecycle_complete to True
# Your code here

Need a hint?

Use lifecycle_complete = True to mark completion.