crisis-ready: preparing your incident response team for cyber attacks

Source: https://cybersecurity.att.com/blogs/security-essentials/security-breach-how-effective-is-your-incident-response-posture-irp

Bullet Points:
• Sirens sound creating a sense of urgency
• Follow numbers on squad leader’s red cap
• Incident Response Plan (IRP) protocols must include end-to-end communication channels
• Steps of incident response process include preparation, detection and analysis, containment, eradication, and recovery
• Assign severity rating to determine impact of incident and establish resolution strategies
• Follow industry standards to improve incident response effectiveness
• Leverage third-party threat landscape evaluations
• Employ Managed Threat Detection Response (MTDR), Threat Model Workshop (TMW), and Cyber Risk Posture Assessment (CRPA) services
• Implement incident response strategy and assess security attack surface portfolio
• Increase organizational resiliency and continuity of operations