A security incident response playbook is a comprehensive document that guides the actions of organisations when addressing different categories of security incidents. It offers organisations a structured, systematic, and documented means of addressing various category of security issues in a formal manner ensuring effectiveness and efficiency and avoiding inconsistencies in the response efforts. The organisations in the UK adopt a security incident response playbook to enhance teamwork, technical oversight, time efficiency and reduce impact of attacks by cyber criminals. Typical contents of the playbook cover designated roles and expertise, notification process, escalation process, evidence gathering instructions and incident review procedures.
Popular Posts
