# Neural Incident Response **Entity class:** Security process ## Definition **Neural incident response** applies detection, containment, eradication, recovery, and verification to a compromised neural-interface system. The response target includes the implant, connected services, models, credentials, command path, stimulation state, and biological effects. ## Sequence The operating sequence is: detect anomalous or unauthorized activity; preserve provenance and audit evidence; revoke compromised authority; isolate communications or stimulation; remove malicious firmware, software, or models; restore trusted parameters; evaluate downstream neural effects; complete [[wiki/Verified Neural Restoration|verified neural restoration]]; and maintain heightened monitoring against persistence or recurrence. ## Relationships - **attack class:** [[wiki/Brainjacking|Brainjacking]]. - **security field:** [[wiki/Neurosecurity|Neurosecurity]]. - **baseline:** [[wiki/Trusted Neural Baseline|Trusted Neural Baseline]]. - **continuous input:** [[wiki/Continuous Vulnerability Intelligence|Continuous Vulnerability Intelligence]]. ## Sources / Provenance - U.S. Food and Drug Administration, [Cybersecurity in Medical Devices FAQ](https://www.fda.gov/medical-devices/digital-health-center-excellence/cybersecurity-medical-devices-frequently-asked-questions-faqs), accessed 2026-09-23. - Laurie Pycroft et al., [“Brainjacking”](https://pubmed.ncbi.nlm.nih.gov/27184896/), 2016. **As of:** 2026-09-23