What are the phases of incident response?

NIST SP 800-61: Preparation; Detection and Analysis; Containment, Eradication and Recovery; Post-incident activity (lessons learned).