Use Cases
Our consulting engagements assess your crisis management and incident response preparation.
The scope for each service is fixed and includes defined outcomes; however, we can work with you to reasonably customize the scope if needed. The Service unit value (1 Service Unit=5 hours) and sizing - (S)mall, (M)edium, (L)arge - listed in this catalog are based on your organizational or network infrastructure size and are subject to adjustment based on the specific engagement objectives and desired outcome.
All services in this catalog, including related communication and documentation, are delivered in English, remotely or on-site. Local language options may be available. Please, engage with us to get more details on the service descriptions.
All services are available (and sized as Small, Medium, Large) as standalone engagements or through a prepaid retainer (10 to 50 service units).
Service Features
Incident Response Plan Development
We will help you develop incident response (IR) plan materials at both a strategic and a tactical level. Strategically, we will help you with IR plan development, security policy integration, capability development, and governance. Tactically, we will help you define IR workflows, roles and responsibilities, and detection and response processes specific to your organization.
- IR Response Plan Development (S:12 < 5K employees; M:16 < 10K employees; L:24 > 10K employees)
Incident Response Plan Review
The Incident Response Plan Review is a detailed review of your existing incident response (IR) posture and focuses on analysis of your current IR capabilities, processes, and practices. In assessing your environment, and relevant standards and regulatory requirements, we will apply its expertise and breadth of experience to evaluate IR capabilities and provide prioritized recommendations for improving IR practices.
- IR Response Plan Review (S:12 < 50 pages of doc review; M:16 < 75 pages; L:20 < 100 pages)
Incident Response Plan Playbook Development
Playbooks contain incident-specific guidance for responding to a potentially chaotic situation. While an IR plan provides an overarching technical and non-technical organizational response to any cybersecurity incident, a playbook contains guidance for a specific type of incident. Playbooks are typically used for common or high-profile incident types that may require additional planning, such as specific steps to follow for responding to a malware attack.
- IR Playbook Development (S:4;M:8)
Crisis Management (ISO22361)
Playbooks contain incident-specific guidance for responding to a potentially chaotic situation. While an IR plan provides an overarching technical and non-technical organizational response to any cybersecurity incident, a playbook contains guidance for a specific type of incident. Playbooks are typically used for common or high-profile incident types that may require additional planning, such as specific steps to follow for responding to a malware attack.
- IR Playbook Development (S:4;M:8)
Additional ISO22361 collaterals from Abilene Advisors and Abilene Academy
- ISO22361 implementation
- ISO22361 training & certification: lead crisis manager
Our team will assess your environment and define the right approach
