1. Introduction to Security Incidents and Response Against Cyber Attacks

This introduction chapter presents the different concepts and context of the book. It explains how the pandemic has led to digital transformation and therefore a dramatic increase in security incidents and cyberattacks. How training to mitigate security incidents and cyberattacks has resulted in more hackers and cybercriminals being trained. To make matters worse, security incidents and cyberattacks are now being armed with technologies like Artificial Intelligence, which can easily outsmart human responses in trying to detect, mitigate, and counter attacks. Along the way, we have learnt a lot and developed ISO27000 standards, NIST 800 61 Incident Handling Guides, as well as local and regional Computer Security Incident Response Teams (CSIRT). A security incident or cyberattack takes place when there is an unauthorized access to an organization computer network. Computer Emergency Response Teams (CERT) and Computer Security Incident Response Teams (CSIRT) are usually responsible for attending to security incidents and cyberattacks at the organizational, national, and regional level. It is important that actual or suspected security incidents be reported as early as possible so that organizations can limit the damage and cost of recovery.