SANS Incident Handler's Handbook and PICERL Methodology
The SANS Institute Incident Handler's Handbook establishes the widely-adopted PICERL incident response methodology: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned. SANS provides the most widely recognised incident response training and certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), and GIAC Certified Forensic Examiner (GCFE).
Domains
Phase 6 - Lessons Learned
Phase 5 - Recovery
Phase 4 - Eradication
Phase 3 - Containment
Phase 2 - Identification
Frequently Asked Questions
Map SANS Incident Handler's Handbook and PICERL Methodology to any other framework
Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.