Incident Response Playbooks & Runbooks
Incident response playbooks and runbooks give you an established workflow and process documentation for specific types of incidents or threats that might affect your organization.
IR Playbook & Runbook Development Services
Our IR playbook and runbook services ensure that you’re following a predefined process and keeping appropriate resources informed and engaged during a response effort.
As part of these services, we:
- Review and assess your existing incident response documentation.
- Interview key employees and executives to gather additional information about your IR processes and threat landscape.
- Propose incident response playbooks or runbooks for specific threat activity based on our knowledge of recent threats and incident handling expertise.
- Develop associated playbooks and runbooks for integration into the existing IR documentation.
Our goal is to help ensure that you’re able to effectively respond to specific incidents that could impact your organization.
Data Collection & Information Review
Our security practitioners work closely with your team to collect and review current incident response documentation, including any existing incident response plans, associated processes, business workflows, architecture information, technology solutions and documentation related to recent incidents.
Additionally, we conduct Q&A sessions with key personnel to gather additional feedback, data and information that might not be included in the current documentation.
These steps allow us to propose playbook and/or runbook topics that are directly applicable to your organization. We develop the workflows to include all necessary groups, processes, solutions and third parties that will be defined in the process.
Workflow Development & Integration
Based on the observations made during the documentation review and results of interviews, we’ll develop the incident response playbooks or runbooks to capture workflows or processes specific to the threat defined in collaboration with your organization.
Workflow and process documentation incorporate industry best practices, appropriate roles, notification requirements, applicable solutions and a well-defined structure for responding to the incident. Once finalized after review with your stakeholders, the newly developed documentation can be added to existing incident response plans.
Certifications
Put an ELITE Highly-Trained Team on Your Side
SANS GIAC-Cyber Guardian
CISSP
GCFA
GCFE
GSE
GCIH
GREM
GCIA