Kroll Interview Question

I was asked about incident response lifecycle