Question

Incident ____ is the process of evaluating organizational events, determining which events are possible incidents, also called incident candidates, and then determining whether or not the incident candidate is an actual incident or a nonevent, also called a false positive incident candidate.

Answer 1

Answer: Incident classification

Explanation:

Incident is a clearly identified attack on the information assets of an organization which would threaten the assets' integrity, confidentiality, or availability.

Incident classification exists mainly to classify incidents so as to provide initial support. The initial support means proper analysis, evaluation and routing and the classification is done not because the root cause or technical causes of the incident is to be determined.