Problem Statement
According to the NIST framework, which of the following is NOT an IR phase?
Explanation
NIST outlines four key phases of incident response — Preparation, Detection and Analysis, Containment Eradication and Recovery, and Post-Incident Activity.
Marketing is unrelated to the security process.