Incident Workspace
Coordination, containment (action plane freeze), and recovery — NIST SP 800-61 lifecycle
Active Incidents (Action Plane Frozen)
| Incident ID | Severity | Summary | Status | Phase | Action |
|---|---|---|---|---|---|
| inc-4f21 | SEV1 | Unauthorised API access attempt detected in prod-us-east-1 | CONTAINED | contain |
Recent History
| Incident ID | Severity | Summary | Status | Phase | Timestamp |
|---|---|---|---|---|---|
| inc-9b22 | SEV2 | High latency detected in model:churn-predictor | RESOLVED | learn | 2h ago |
| inc-1c44 | SEV3 | Resource quota exceeded in cluster-beta | CLOSED | learn | 1d ago |
NIST Incident Lifecycle
1
Prepare2
Detect3
Analyse4
Contain5
Eradicate6
Recover7
Learn