Building and Optimising Incident Response Playbooks Mumbai

“We have an incident response handbook” OR “Yes, we have carried out a BCP exercise and can recover from a disaster” OR “We have a 200-page major incident handling guide.”

Companies repeat these and other statements every time they are asked if they are prepared for a cyber-attack or data breach. The truth is that most businesses only discover how ineffective their plans are when they are hit by a cyber-attack.

You may be prepared for a traditional crisis, like a flooding of the data centre or your office building not being available due to an incident.

However, a cyber-crisis is often invisible and near impossible to detect in the early stages. In many cyber-attacks, by the time a business detects the attack, it is often too late. The data has been stolen , the newspapers know about your attack and your customers are worried about their personal data being in the hands of criminals.

Cyber Management Alliance’s Building and Optimising Incident Response Playbooks one-day workshop equips you with the necessary knowledge to ensure your business has the actionable response mechanisms, checklists and procedures to respond to a variety of simple and complex cyber-attacks and data breaches.

In this workshop, you will learn:

The basic building blocks of a good and effective playbook. How NOT to respond to incidents, attacks and data breaches; pitfalls to avoid when creating playbooks. Triage - What it is and what's its role in incident management. How to use playbooks to aid in Triage. Definition of a breach - Why you need this and how to roll this out in your organisation. Creating Scenarios - Deep-dive into creating effective scenarios. Creating playbooks - Starting from basic to complex playbooks - Multiple interactive sessions. Management playbooks - How to build and engage management to use playbooks. Running internal workshops - How to ensure maximum participation and effective results. Understanding the technology stack required to deliver automation. Understanding the role of SOAR (Security Orchestration and Response) and the tools that you can use. Organisational capability and the role of playbooks in increasing staff skills and retention.

Key Benefits :

Applicable knowledge to create and use actionable playbooks. Useful templates and collateral that you can deploy in your organisation. Understanding SOAR, other technologies and automation to help in the "heavy lifting" of manual tasks. Avoid the common pitfalls of incident response plans and playbooks.

Learning Objectives: List key benefits of playbooks and recognise their significance in enabling an organisation’s cyber resilience. Understand the basics of creating playbooks and describe the key components required to create them. Communication strategies during a data breach. Create organisation-specific attack scenarios. Analyse and assess the scenario and select the appropriate playbook. Construct simple and complex playbooks.