Incident Triage
Incident triage classifies alerts by severity (P1-P4), prioritizes them by potential business impact, determines whether they are a true positive or false positive, escalates to the appropriate teams, and allocates resources proportional to criticality.