Does your organization have a documented incident prioritization framework that considers scope, impact, and time-sensitivity?

An incident prioritization framework helps security teams focus resources on the most critical incidents first, ensuring efficient response to security events. The framework should evaluate incidents based on their scope (how many systems/users are affected), potential impact (financial, operational, reputational damage), and time-sensitivity (how quickly the incident must be addressed to prevent escalation). Evidence could include a documented incident response plan with a prioritization matrix or scoring system, incident classification guidelines, or screenshots of ticketing/incident management systems showing how incidents are categorized and prioritized.