Incident Response Workshop and Plan Development

Incident Response

Incident Response Workshop and Plan Development

We’ve put together a package of services to assist companies in improving their incident response capability. This includes a half-day incident response workshop, a review of their current incident response plan, and development of additional documentation to improve your response maturity, such as scenario specific playbooks. Don’t have a plan ready for review? We can build one for you.

Half-day Incident Response Workshop

Our incident response workshop gives IT Teams an overview of how to perform an effective incident response. Our speakers are experienced ethical hackers and can give first-hand examples of how different threats are built and delivered – and how they can evade detection and response. We’ll walk the team through response steps, communication protocols, and decision-making paths.

In the workshop we’ll cover:

Incident Detection and Triage
Incident Escalation
Containment Strategies
Establishing Roles and Responsibilities
Communications Plans
Post-incident Activities

Incident Response Plan Review and Development

After the workshop, our consultants will conduct a thorough review of your current incident response documentation and either give direct feedback, or develop improved versions that align with best practices and cover modern threat scenarios. If you’re not confident in your current plan, we can start from scratch and work with your team to develop something better suited to your needs.

Scenario Playbook Development

The actions-on following an incident can vary widely depending on the type of scenario. Therefore, we’ll help build your maturity by developing a small set of incident-specific playbooks to cover major concerns such as:

Personal Data Breaches
Ransomware Attacks
Privileged Account Compromise

The goal of this package is to upskill your technical teams on how to effectively and efficiently handle security incidents – and to give them the tools necessary to work with the broader organisation to protect against real-world threats.