IR-4 (4) Incident Handling | Information Correlation (H)