Explain incident reporting and operational response.

What will be an ideal response?

A system for detecting incidents is useless if it is not accompanied by an effective operational response. Consequently, intrusion detection and operational response should be tied to a formal incident reporting function. When a violation of system integrity is identified, the incident reporting function kicks in. Incident reporting should be able to describe both the type and estimated impact of the incident for response analysis. That description is given to the operational response team for coordination and action. The operational response team then acts to contain any harm and prevent reoccurrence.