I will review or create an incident response runbook or playbook

Imagine there is an information security incident at your organisation: A hacker moving through your network, on his way to exfiltrate your comany's secrets or a ransomeware spreading through your coporate network to encrypt all data that is vital to your business operations.

What are you going to do?

Asking this question in such a situation means that you are not well-prepared: By the time of an incident, follow-up actions must be well-defined already as timely response is key.

So-called Incident Response Playbooks are regarded best practice in such sitations: They provide a clear sequence of actions to be taken, to identify the threat, spot affected assets, isolate the spreading of the threat and to return to nominal business as soon as possible.

With this gig I will review your existing playbooks or create a new playbook for a given Security Incident, which is customized for your business. This way you will be well-prepared for potential security incidents that may be ahead of you.