Discovery and awareness,Known facts and affected services,Containment and preservation,Impact and risk assessment,Notifications and reasons,Recovery actions and owners,Post-incident learning ,,,,,,