Incident Response Planning
A security incident is never welcome, but it is much easier to handle when your team already knows its roles, responsibilities, and action plans. Boost Incident Response Planning pairs you with an experienced consultant who develops a plan that fits your organization and helps document your response to any security incidents that occur. CoNetrix Security has developed information security programs since 2001, and our experts hold CISSP, CRISC, CISM, and CISA certifications.
Plan Development, Presentation-Ready Documentation
Your consultant builds your plan based on NIST’s Computer Security Incident Handling Guide, documenting roles, responsibilities, and action plans for a variety of scenario-specific security incidents. Development can stay centralized, or your process managers can give input on their areas of expertise. Once the plan is complete, your consultant orients your team to it and conducts a tabletop test with your team.
Every aspect of your plan is documented in Tandem and exports to professional documentation for your Board, committee, auditors, or regulators. After an incident, your consultant provides guidance on finalizing incident documentation and updating your plan.
Service Features
Engagements run as a six-month project with optional annual ongoing support, and consulting is available onsite or remotely. Throughout the engagement, your consultant tracks incidents with you in Tandem Incident Management, answers questions about your plan, and helps document your response. Plans follow federal guidance and draw from industry best practices, such as GLBA, HIPAA, and guidance from the FFIEC, FDIC, OCC, Federal Reserve, and NCUA. Incident Response Planning is also part of VISO Consulting and pairs well with Business Continuity Planning. For monitoring that escalates confirmed threats with remediation guidance, CoNetrix Technology offers Cybersecurity Monitoring.
Your consultant helps you build:
-
Incident response plan based on NIST’s Computer Security Incident Handling Guide
-
Plans for a variety of scenario-specific security incidents
-
Documented roles, responsibilities, and action plans
-
Team orientation and a tabletop test
-
Incident tracking over the life of the engagement
-
Post-incident documentation and plan updates
-
Presentation-ready documentation for your Board, committee, auditors, or regulators
-
Training on Tandem Incident Management