Criminals and nation states are increasingly attacking the technology assets of individuals, organisations and governments, stealing and selling valuable information, and in an alarming trend, paralysing critical infrastructure. So handling and responding to such computer security incidents has become an important part of information technology programs due to growth in digitalization of today’s world. To carry out incident response into any organisation requires substantial planning and resources. In this paper, the focus will be on handling variety of incidents which occur in an organisation.