What is the difference between an RDS incident and detection?
With RDS, we classify two types of severity:
suspected breaches, which can consist of a single
high severity detection or several medium or low detections.
Detections can be
The Rapid Detection and Response Service uses the
data, as well as our human expertise to respond to the severity in the
appropriate way. For example, we report on all detections in the portal and
send our customers email notification.
If a detection is elevated to an incident, we notify our customers by
phone, as well as providing them with the event data from the portal.