Incident Management, Detection Measures, Patching, and Change Management

Introduction

This lesson continues Domain 7, Security Operations (13% of the exam, ISC2 exam outline effective 15 April 2024). It covers tasks 7.6 to 7.9: conduct incident management, operate and maintain detective and preventative measures, implement and support patch and vulnerability management, and understand and participate in change management processes. The previous lesson covered investigations, logging, configuration management, and foundational operations. The next lesson covers recovery, disaster recovery, business continuity, and physical security.