The paper goal consists in the deve­lopment of automated technique for security incident response based on the objective quantitative metrics. Implementation of the technique should decrease organization losses from cyber attacks. The paper evolves an approach to the automatic security incidents response. The approach is based on the data from open sources, analytical modeling and consideration of the hierarchical integrated set of heterogeneous security metrics. It also gives input data for the calculation of security metrics. Analytical models allow security monitoring, forecasting of attacker steps and calculation of security metrics. The results of the experiments that demonstrate an efficiency of the suggested technique and algorithms are provided.