Our security practitioners work closely with your team to collect and review current incident response documentation, including any existing IR plan, associated processes and documentation related to recent incidents. Additionally, we will conduct interviews with information security personnel, counsel, PR, third-party service providers and others. Through this process we will:
- Identify gaps in existing IR plans or processes
- Understand current incident preparation level
- Gather additional information that can be leveraged into the newly defined plan
Based on observations made in the data collection and information review phase, we create the incident response plan to document recommended roles and responsibilities, incident criteria, escalation process and additional details according to industry best practices. This plan includes the perspectives and feedback from interviewed stakeholders.
