In the context of incident response, what is the purpose of the recovery phase?
- To analyze security logs
- To identify vulnerabilities
- To investigate the breach
- To restore normal operations
The recovery phase in incident response is focused on restoring normal operations, services, and data after a security incident, ensuring that the organization can continue its activities with as little disruption as possible.