This Talk Is About Incident Response Processes

Documenting processes for incident response is rarely a subject that evokes passionate enthusiasm among people working in information security. These misunderstood tools, like the Incident Response Plan or Playbooks, are often dismissed as impractical shelf ware or audit checkboxes, but they serve an essential role in the incident management process. This talk will present an overview of how to break these processes down, how they should interact with the incident management program, and ways you can build these resources to solve for modern incident response scenarios that are relevant to your organization.