IR playbooks – is your incident response plan only stored in digital format or does your org keep a printed copy on hand?

Security Strategy & Roadmap Threat Intelligence & Incident Response

We only have digital copies of our IR plan60%

We have digital & printed copies of our IR plan37%

Don’t know2%

258 PARTICIPANTS

3.1k views

Content you might like

Has anyone drafted an SOW for a cloud-based SIEM with setup, migration, and maintenance? I’m working on a FedRAMP-authorized SIEM SOW, migrating from on-prem Splunk, covering data, searches, alerts, dashboards, and models. Scope includes Environment Setup: Cloud provisioning, configuration, testing. Connectors/Parsers: Custom data source integration. Content Development: Rules, use cases, threat feeds. Performance Tuning: Query/index optimization. Runbooks: Operational procedures. Also required: 24x7 support, maintenance, lifecycle and application management, role-based training, and documentation. Must comply with NIST SP 800-53, CJIS, and FedRAMP Moderate+. Goal: Secure, scalable SIEM for rapid deployment. I may be missing elements, so suggestions are welcome. Please share redacted SOWs or tips if possible.

What is the most critical information you expect your cybersecurity team to deliver to you on a consistent basis?

Strategies to prevent ransomware from impacting data backup & recovery33%

What it will take to restore minimal operations after a compromise48%

How prepared the organization is to engage law enforcement in the event of an attack15%

How prepared it is to engage cybersecurity investigators2%

Other (share below)

View Results

Anyone have experiences or POVs on TruffleHog Open Source vs Commercial license?

What would be the strategy to raise awareness among small businesses about investing in Cybersecurity?

Read More Comments

How likely is an organization to have misconfigured multi-factor authentication (MFA) settings?

Very likely6%

Likely42%

Somewhat likely23%

Somewhat unlikely14%

Unlikely10%

Very unlikely2%

Unsure

View Results

IR playbooks – is your incident response plan only stored in digital format or does your org keep a printed copy on hand? | Gartner Peer Community