Service Overview & Methodology
The Incident Response (IR) readiness service evaluates an organization’s readiness to respond to cyber incidents. It includes periodic assessments by Digital Forensics and Incident Response (DFIR) experts to evaluate the CISO team’s capabilities, validate incident response processes, and support the development and implementation of a structured IR plan.
Deliverables
A comprehensive report outlining the organization’s current incident response readiness
A prioritized list of recommendations to enhance IR readiness
Prerequisites
Access to the organization's technical data on infrastructure and systems
Understanding of the organization's cybersecurity personnel, policies, procedures, and technology
Availability of key personnel involved in handling cyber incidents
Customer Engagement
The client must provide access to the organization’s technical data, assist CYE’s team as needed, and provide additional information when needed.
Activity Duration
The duration of the IR Readiness assessment varies depending on the size and complexity of the organization's infrastructure and systems.
A typical assessment can take up to 3 weeks to complete and may include an on-site workshop of 2-3 days.
Relevant Standards
NIST SP 800-61 Incident Response Framework
Security Domains Covered
Security operations, monitoring and incident response