Question
A tech department reviews the current model for incident response procedures in response to a serious incident at the company. What part of the process focuses on reviewing the data to determine if it is a genuine incident and then has an appropriate priority level assigned to it?