HRM-MEAS-15Term
Incident lift
How much more often a real incident follows a pattern, a cohort or a sequence, than the base rate across the workforce. Lift above 1 shows the pattern matters in this organization.
Example
A SOC analyst finds that account takeover incidents follow the ‘Leak to login’ sequence far more often than chance and moves it up the priority list.
Related terms
3"Incident lift" (HRM-MEAS-15), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/incident-lift
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.