An Excerpt From (Why is NIST SP 800-61r2 relevant in Security Operations Center).
Incident response significantly decreases the likelihood of hackers and intruders penetrating an organization’s data system and causing damage by stealing or corrupting the data. Essentially, an incident response ability rapidly helps in incident detection, cushioning against loss and destruction, restoring information technology services, and redressing the weaknesses exploited. An Excerpt From IR
