Incident Response Plan Development

Incident Response Planning

It’s not a matter of if, but when. Ensure that you’re prepared to effectively respond to a security incident with documented plans and procedures.

IR Plan Development & Review Services

Our IR development and review services ensure that you have a well-defined process following industry best practices for responding to an incident that could impact your organization. As part of these services, we:

Review and assess your existing incident response documentation.
Interview key employees and executives to gather additional information and perspectives on incident response planning, organizational roles and responsibilities.
Review recent incidents to understand current processes and technologies in place to support a security incident investigation.
Create or update your incident response plan to align with industry best practices and senior leadership expectations.

Our goal is to help ensure you have a comprehensive plan with a well-defined process, pre-defined roles, escalation criteria and additional centralized information that allows you to effectively respond to incidents.

Talk to an Expert

Data Collection & Information Review

Our security practitioners work closely with your team to collect and review current incident response documentation, including any existing IR plan, associated processes and documentation related to recent incidents. This documentation review helps:

Identify gaps in existing IR plans or processes
Understand current incident preparation level

We also conduct interviews with information security personnel, counsel, PR, third-party service providers and others to gather additional information that can be leveraged into the newly defined plan.

Plan Development

Based on observations made in the data collection and information review phase, we create the incident response plan to document recommended roles and responsibilities, incident criteria, escalation process and additional details according to industry best practices. This plan includes the perspectives and feedback from interviewed stakeholders.

Plan Execution & Simulation

Once your new incident response plan has been fully developed and approved, our team recommends an optional IR tabletop exercise that allows us to develop a simulated incident that ensures knowledge and adherence to your plan. As part of this exercise, we develop a custom incident scenario for your organization and ensure that stakeholders fully understand their associated roles and responsibilities during the incident response process.