Forvis Mazars Group interview question

Incident response life cycle? And CIA, Risk, Threat, Vulnerability?