Question

In which incident response phase do team members determine how seriously the incident has affected critical systems or data

Answer 1

incident identification

Step-by-step explanation:

Incident identification is studying the impact of an incidence on a system and knowing the exact cause of the incident . Here, an organization identifies or determines whether they have been breached. To arrive at the actual cause of an incident in a system, some pointers like unusual activities - unusual login attempt, certain activities that are suspicious should be looked out for. Several questions that would prompt where the incident originates from should also be asked.

Although, incidence identification is usually a daunting task for most organizations ; once they are able to identify the causes, it makes the whole process seamless because the whole situation will be documented hence becomes a reference point for future occurrence.